Guard your public GitHub footprint

See which of your own repositories are public right now - and get alerted the moment a new one appears, so nothing leaks unnoticed.

Enter your GitHub username or organization to audit what is currently exposed. RepoGuard keeps watching and warns you before an accidental public repo becomes a problem.

How RepoGuard works

Scan an account

Enter any GitHub username or organization. RepoGuard instantly lists every public repository - no login needed.

Spot the risk

See what is exposed and catch repositories that look like they were published by mistake, flagged by risky names.

Stay alerted

Monitor the accounts you care about and get notified the moment a new public repository appears.

What RepoGuard checks

Full public inventory

Every public repository under a user or organization, with stars, languages and activity - in one clear view.

Accidental exposure

Repositories whose names hint at secrets or internal tools are flagged, so nothing slips out unnoticed.

Continuous monitoring

Watched accounts are re-checked regularly, so a new public repository never stays hidden from you.

Instant alerts

Get an email the moment exposure changes - turning a silent leak into an immediate heads-up.

Why your public footprint matters

Most leaks on GitHub are not breaches - they are repositories set to public by mistake. Bots scan new public repos for credentials within minutes, so a single slip can expose API keys, internal tools or customer data. Knowing exactly what is public, and being told the instant it changes, is the difference between a quick fix and an incident.

Frequently asked questions

Is RepoGuard free?

Yes. The public scan is free and needs no login - just enter a GitHub username or organization.

Does RepoGuard need access to my private repositories?

No. RepoGuard only reads public data through the GitHub API. It never sees private repositories or asks for write access.

Can I monitor accounts other than my own?

Yes. You can watch any GitHub user or organization and get alerted when their public footprint changes.

How often is an account checked?

Monitored accounts are re-scanned regularly. When a new public repository appears, you are notified.

What counts as exposure?

Any repository that is publicly visible. Open source is meant to be public - the risk is the repository you did not mean to publish.