$ loading_
Scan code secrets, verify live keys, and rewrite them to env vars.
Copy the install command and let the AI configure it · recommended for beginners
No copy-paste install info for "leakferret" yet — see the docs or source repo.
Scan the current repository for potential secret leaks, list findings by file, and flag high-risk credential patterns.
A file-by-file list of leaked secrets with secret type, risk level, and location details.
Verify the scanned API keys and mark only the keys that are still live by calling the provider, then summarize the results.
A verification report for each key, distinguishing invalid, possibly live, and confirmed live credentials.
Rewrite confirmed hard-coded secrets into environment variable lookups and provide the list of required new environment variable names.
Suggested code changes or a patch, plus environment variable names and replacement guidance.
Scan code changes for leaked secrets and insecure config with actionable fixes.
Scan files, configs, or text for leaked secrets and risky misconfigurations.
Scan code and text for leaked secrets and exposed API credentials.
Scan Python projects and GitHub repos for vulnerabilities, secrets, and AI risk insights.
Scan codebases for secrets, SAST issues, vulnerable dependencies, and IaC risks.
Scan AI coding workflows for code, secrets, dependency, and tool security risks.