Scan your .env file for secrets

The humble .env is where secrets pile up — and where they leak when committed by accident. Upload yours and GhostCred surfaces every credential, scores the risk, and maps it to SOC 2 / HIPAA.

What this checks

• ✓API keys, tokens, and client secrets across providers
• ✓Database connection strings with embedded passwords
• ✓JWT secrets, encryption keys, and webhook secrets
• ✓Anything that should be in a secret manager, not a file

Why it matters

One stray `git add .env` and your whole stack is exposed. A quick scan tells you exactly what's at risk.