EnvScan

Find leaked secrets and bad config before you commit.

Paste a .env, yaml, or toml config and EnvScan flags leaked secrets (keys, tokens, passwords), insecure settings, and gives a remediation checklist mapped to common weakness types.

Monthly — 29/mo Yearly — 290/yr

Cancel anytime. Save 2 months with yearly. Secure checkout via Waffo.

Scan config for secrets

Demo mode (no AI)

Paste config (.env / yaml / toml)

Focus

✨

Detect leaked keys / tokens / passwords

✨

Flag insecure settings

✨

Map findings to weakness types

✨

Give a remediation checklist