tool.ren

Source Secret Scanner

Scan pasted text, files, folders and ZIP archives locally for high-confidence secret patterns, inspect masked evidence and export redacted reports or cleaned source copies.

Local scan with masked evidence
No source code is uploaded or executed. Detection is heuristic, so rotate every credential that may have been exposed even after redaction.

Up to 500 text files, 5 MB each and 50 MB expanded total. ZIP path traversal and oversized expansion are rejected.

About Source Secret Scanner

Find exposed credentials without sending source code away. Scan pasted text, files, folders and ZIP archives locally for high-confidence secret patterns, inspect masked evidence and export redacted reports or cleaned source copies. The core workflow is designed to run in your current browser.

Key capabilities

  • Run detection in a local Worker without uploading source contents
  • Mask every credential in evidence, reports and cleaned source exports
  • Read pasted text, selected files, folders and bounded ZIP archives
  • Export JSON, CSV, Markdown and SARIF findings without raw secrets

Useful for

  • Catch accidental credentials before committing or publishing code
  • Locate and redact likely exposures during incident response
  • Inspect supplied source without executing it or uploading it

Frequently asked questions

Is Source Secret Scanner free to use online?

Yes. Source Secret Scanner opens in a modern browser and does not require desktop software installation.

What is Source Secret Scanner useful for?

Common use cases include Catch accidental credentials before committing or publishing code; Locate and redact likely exposures during incident response.

Is my input or file uploaded?

The core processing workflow is designed to run locally in the browser. Key capabilities include Run detection in a local Worker without uploading source contents, Mask every credential in evidence, reports and cleaned source exports, Read pasted text, selected files, folders and bounded ZIP archives; account, comments, and anonymous analytics may still create normal site requests.

Comments

0 comments

Sign in to comment
AAccount

Sign in to comment and reply.

Sign in
No comments yet. Be the first to leave feedback.

ToolRen Online Toolkit © 2026