Free tools

See what changed between two security reports

Compare baseline and current finding metadata using locations or stable fingerprints. A finding that disappears is not proof that it was fixed.

In your browser nothing you paste is uploaded
Up to 1 MiB

Provide the earlier findings as baseline and the latest findings as current, using the same matching method for both.

Loading this tool…

This checks one thing. A scan reads your whole repository and tells you what an attacker would find first.

Free scan
More tools
CODEOWNERS coverage checker Match file paths against CODEOWNERS rules and find gaps in ownership. Environment drift checker Compare environment variable names across deployments without exposing values. Security finding deduplicator Group duplicate findings by location or a supplied stable fingerprint. JWT debugger Decode a token and catch alg:none, a missing expiry, and secrets in the payload. Secret scanner Paste a .env file or a diff and find the keys that should not be in it. CSP evaluator Grade a Content-Security-Policy and see which directive undoes it.