Secret Scanner
100% client-sideDetects credentials at risk of leaking from code, .env files, and logs before you commit or share — 18 patterns (AWS, GitHub, Slack, Stripe, …) plus an entropy heuristic. Input never leaves your browser.
Secrets detected4
CriticalAWS Access Key ID
L3AKIAIO…******MPLECriticalGitHub Token
L4ghp_aB…******6789HighConnection String (password)
L2postgr…******4ss@MediumHigh-entropy value (GITHUB_TOKEN)
L4ghp_aB…******6789⚠ If any of these were already committed, rotating the credential comes first — scrubbing history alone is not safe. Revoke the key and issue a new one.