Detectors find leaked API keys, tokens, and credentials across your stack and verify them live against the provider. Analyzers then map the blast radius: who owns the key, what it can touch, and how much it matters.