In case someone is interested, here is a tool which actually (no false positives) detects data leak via your APIs : https://fallible.co/blog//2016/03/13/Automat

In case someone is interested, here is a tool which actually (no false positives) detects data leak via your APIs : https://fallible.co/blog//2016/03/13/Automating-data-leak-detection/ https://fallible.co/blog//2016/03/13/Automating-data-leak-de... Tool link: https://overseer.fallible.co https://overseer.fallible.co (I doubt people will be okay with installing our certificate, but just in case someone wants to use a hosted version)