Detect exposed secrets

Leaked an API key? Pick the type below for what an attacker can do and exact rotation steps - or scan your whole repo and site free.

• AWS Access KeyAKIA…
• Stripe Secret Keysk_live_…
• OpenAI API Keysk-…
• Anthropic API Keysk-ant-api03-…
• Supabase Service-Role KeyeyJ… (JWT)
• GitHub Personal Access Tokenghp_… (also github_pat_…)
• Google API KeyAIza…
• Slack Tokenxoxb-… / xoxp-…
• Discord Bot Tokenbot token
• SendGrid API KeySG.…
• Mailgun API Keykey-…
• Twilio API Key / Auth TokenSK… / Auth Token
• Database Connection Stringpostgres:// (mysql/mongodb/redis://)
• Private Key (RSA / SSH / EC)-----BEGIN … PRIVATE KEY-----
• JWT Signing SecretHS256 signing secret