Secret & PII Leak Scanner
Client-Side · No UploadPaste text and find leaked secrets and personal data — all in your browser
Runs entirely in your browser — the text you paste never leaves this page and is never logged.
What this is: a client-side scanner that flags well-known secret formats (AWS, GitHub, Google, Stripe, Slack, private keys, JWTs…), high-entropy strings that look like keys, and PII (emails, phone numbers, IPs, SSNs, and Luhn-valid card numbers). It's a curated demo detector — thorough on known patterns but not exhaustive DLP — so it can miss a cleverly disguised secret and can occasionally flag a false positive. Every finding shows its line so you can judge it. Values are masked in the results.