Scan your .env file for secrets

The humble .env is where secrets pile up, and where they leak when committed by accident. Upload yours and GhostCred surfaces every credential, scores the risk, and maps it to SOC 2 / HIPAA.

What this checks

• ✓API keys, tokens, and client secrets across providers
• ✓Database connection strings with embedded passwords
• ✓JWT secrets, encryption keys, and webhook secrets
• ✓Anything that should be in a secret manager, not a file

Why it matters

One stray `git add .env` and your whole stack is exposed. A quick scan tells you exactly what's at risk.