Exposed Passwords & Sensitive Files Scanner
Scan your web server for exposed .env files, public .git folders, database backups, and leaked credentials.
Overview & why this matters
git` repositories are frequently left publicly accessible on the web, allowing anyone to download your business data.
Why public file leaks are fatal for business
01
Prevent Database & Account Takeovers
An exposed `.env` file hands over your live database login, AWS keys, Stripe tokens, and email passwords to automated web scrapers.
02
Protect Proprietary Source Code
Exposed `.git` directories let scrapers download your entire application code and secret configuration history.
03
Avoid Compliance Fines & Data Breach Costs
Publicly exposing customer records or database credentials triggers massive regulatory penalties under GDPR and data privacy laws.
Web Server Blocking Rule
Block all hidden dotfiles and backup extensions directly in your web server or Cloudflare WAF:
location ~ /\.(env|git|svn|htaccess) {
deny all;
return 404;
}
location ~* \.(bak|config|sql|tar|zip|gz)$ {
deny all;
return 404;
}