Client-side tool
Local Secret Scanner
Check source, logs, environment files, or diffs for recognizable credential formats without uploading the text.
Processing stays in your browser
Pattern matching has false positives and false negatives. If a real credential was exposed, revoke and rotate it immediately; deleting it from the latest commit is not enough.