Secret Scan
Did something leak?

Exposed Secret Scanner

Scan a site's homepage and its linked JavaScript bundles for accidentally-exposed API keys, tokens, and credentials — AWS, Stripe, GitHub, Shopify, database URIs, private keys, and ~75 patterns in all.