.env / Secret Leak Scanner

Catch AWS keys, API tokens & passwords before you commit

Regex-based scanner that checks pasted code or config text against common secret and credential formats — AWS access keys, PEM private key headers, Slack tokens, Stripe live keys, GitHub personal access tokens, JWT-shaped strings, and hardcoded password/API-key assignments. Each match shows the exact line number and a severity level, plus general secret-hygiene guidance for cleaning up and rotating exposed keys.

• →Detects AWS access keys, Stripe live keys, GitHub tokens, Slack tokens, PEM private keys, and JWT-shaped strings
• →Flags generic API_KEY/SECRET/TOKEN and password assignments while filtering out obvious placeholders to cut false positives
• →Shows the exact line number and severity (critical/high/medium) for every match
• →Includes hygiene guidance: .gitignore your .env files, and rotate any key ever exposed since git history retains it
• →Watermarked by Cikal Studio Labs · Works on any device, no install required