Does this replace repository secret scanning?

No. It is a fast local pre-flight check for pasted text. Keep using server-side and CI secret scanners for full repository and history coverage.

Will it upload my logs or secrets?

No. Pattern matching, entropy scoring and redaction run inside your browser with React state only.

Why does it flag high-entropy strings?

Many generated tokens look random. Entropy is a heuristic, so review the context before rotating credentials.

/crypto local tool

Suggest an improvement

Secret Scanner

Detect tokens, private keys and high-entropy values, then create a redacted copy.

Local execution receiptinput path disclosedTool content stays out of MonoTools URLs and API requests.

Working input: Browser memory
Cross-tool handoff: Session only · 10 min
URL payload: Never
Export: Explicit action

Verify it: open DevTools Network, clear the log, use the tool, then inspect fetch/XHR requests. Page assets and optional aggregate analytics may use the network; tool input is not included.

Full privacy model

Loading tool...

How to use

01Paste a log, .env file, stack trace, config snippet or HTTP transcript.
02Review the exposure radar, severity groups and line/column findings.
03Copy the redacted output or incident notes before sharing the text.

FAQ

Does this replace repository secret scanning?: No. It is a fast local pre-flight check for pasted text. Keep using server-side and CI secret scanners for full repository and history coverage.
Will it upload my logs or secrets?: No. Pattern matching, entropy scoring and redaction run inside your browser with React state only.
Why does it flag high-entropy strings?: Many generated tokens look random. Entropy is a heuristic, so review the context before rotating credentials.

guides