Free tools

See which files have a code owner

Supply your CODEOWNERS rules and a list of repository paths. The last matching rule wins; sensitive paths with no owner are called out.

In your browser nothing you paste is uploaded
Up to 1 MiB

Provide the CODEOWNERS file as a JSON string and list the repository-relative paths you want to check.

Loading this tool…

This checks one thing. A scan reads your whole repository and tells you what an attacker would find first.

Free scan
More tools
Environment drift checker Compare environment variable names across deployments without exposing values. Security finding deduplicator Group duplicate findings by location or a supplied stable fingerprint. Security baseline comparator Compare finding sets for new, changed and no-longer-reported issues. JWT debugger Decode a token and catch alg:none, a missing expiry, and secrets in the payload. Secret scanner Paste a .env file or a diff and find the keys that should not be in it. CSP evaluator Grade a Content-Security-Policy and see which directive undoes it.