What this tool expects
Paste configuration or environment text to scan for exposed secrets. Use synthetic values for testing. Detected evidence is redacted in the report.
Detect likely exposed credentials and secret-bearing configuration values without sending content to third-party AI APIs.
Paste configuration or environment text to scan for exposed secrets. Use synthetic values for testing. Detected evidence is redacted in the report.
The result is specific to the secrets checks enabled for this tool. Evidence is shown next to each supported finding so you can verify what triggered it.
The application does not call third-party AI APIs and never executes uploaded content. Do not intentionally submit live credentials. Rotate a real secret if one is exposed.
Use the realistic sample to understand the expected input, scan your own sanitized evidence, review high-impact findings first, then validate the corresponding runtime control.