API Key Leak Scanner

Paste code, config, or logs → instantly spot hardcoded secrets before you commit. Runs 100% in your browser — nothing is uploaded.

Detection is pattern-based (regex) and runs entirely client-side — your text never leaves this page. It catches well-known key formats but is not a guarantee of zero secrets; always use a server-side scanner (e.g. gitleaks/trufflehog) in CI too. Built by panshi.io.