Key Security, Leak Scanners & Pattern Validators
Recognise which vendor a key belongs to, score its entropy, find hardcoded secrets in source and config, and redact what you need to share. Pasted text never leaves the page.
Tools in Scanners
- SCAN
API key vendor detector
Identify which provider a key belongs to, what it grants, and how to revoke it.
- SCAN
Staging vs production discriminator
Tell test credentials from live ones before you send a request with the wrong one.
- SCAN
Hardcoded secret linter
Lint a .env file or source snippet for hardcoded credentials, weak values and unsafe patterns.
- SCAN
Secret leak scanner
Scan a diff, file or log for leaked credentials across 90+ provider signatures.
- SCAN
Entropy & brute-force calculator
Measure a secret's real search space and see how long it survives at five attack rates.
- SCAN
Credential regex tester
Test detection patterns against real text, or load a signature from the built-in library.
- SCAN
Blast radius analyzer
Score what one leaked credential would actually cost you, and what to do about it.
- SCAN
Encrypted secret link generator
Split a secret into a ciphertext link and a separate key, so neither channel alone reveals it.
- SCAN
Secret masker & redactor
Redact a credential so it can appear in a ticket, log or screenshot without being usable.
- SCAN
Key revocation command generator
Get the exact revocation commands, verification step and incident checklist for your provider.