LeakLens extends a secrets scanner into web app terrain with Katana crawling, JS endpoint discovery, source-map rescanning, and optional provider validation. The README is careful about one important boundary, with deterministic rules still owning secret findings while the AI layer only proposes candidates and owner-facing test plans.