Terms & acceptable use

Last updated October 9, 2026. This tool checks one public HTTPS page and selected static, same-origin JavaScript for credential-like patterns. It does not test whether a credential is active or perform a full security assessment.

Use responsibly

Submit only public pages you own or are authorized to assess. Do not use this service for harassment, automated bulk scanning, bypassing access controls, or attempting to reach private networks. The service limits requests and may reject or temporarily block abusive traffic.

Interpret results carefully

A format match may be harmless, and a page without findings may still expose secrets elsewhere. Review each finding yourself. If a real credential was exposed, revoke or rotate it before removing it from the public build. No result from this preview is a warranty, certification, or substitute for a professional security review.

See our privacy notice or contact [email protected] with questions.