Flags lines in a .env file that look like secrets — by key name (SECRET, TOKEN, PASSWORD...), known credential formats (AWS keys, GitHub tokens...), or high entropy — with flagged values redacted by default.
A second pair of eyes before committing or sharing a config file, catching the common cases without you having to read every line carefully.
Paste .env contents or upload a file. Flagged entries are redacted; a button reveals them if you need to see the actual value.
Heuristic pattern-matching, not a guarantee — it can miss real secrets that don't match a known pattern, and can flag ordinary values that happen to look secret-shaped.