Free tool · #1
Leaked Key Check
Paste your website address. We load your page and the scripts it loads, exactly like a visitor's browser does, and look for secret keys that should never be there.
What we check
Your page, the scripts it loads from your own site, and their public source maps. Up to 25 files. We look for keys from OpenAI, Anthropic, Stripe, AWS, GitHub, Slack, Supabase, Google and others.
What we don't do
We don't log in, guess hidden pages or crawl your site. Keys are never shown in full and never stored: you'll see the start and the last four characters, enough to know which one to replace.
Found something?
Assume it's been copied. Make a new key, delete the old one, and move whatever used it to your server, where visitors can't see it. Then scan again.
Only scan your own stuff
This reads public files, but please point it at sites you own or have permission to test. 5 scans per hour.