Free repository scan

Scan a public GitHub repository

Leaked secrets, vulnerable dependencies, risky code and infrastructure misconfigurations, checked in an isolated container. No account needed.

We clone the public repository once, with no credentials, scan it in an isolated container without network access and delete the code when the scan ends. We keep a summary for 7 days at an unguessable link. Secret values are never shown: secrets appear as a count only. Your address is kept only as a keyed fingerprint to enforce fair-use limits; an email address you give is used once to send the link and then deleted. See the Privacy Policy.