Exposed files
Exposed .env and .git checker
Find out if your .env file or .git folder is publicly accessible.
Free, non-invasive check in seconds. No signup.
Scan my website for freeThese files often contain passwords, API keys and full source code.
Why it matters
An exposed .env gives attackers direct access to your database and accounts.
How to fix
Block access at the server, move files out of the web root and rotate all keys.
FAQ
- Is the scan invasive?
- No. We only request public URLs.
Other free tools
- Free security headers checker
- HSTS checker
- Content-Security-Policy validator
- SSL / HTTPS checker
- DMARC, SPF and DKIM checker
- WordPress security scanner
- Free website security test
- Is this website safe? Free checker
- Is this website legit or a scam?
- Fake online store checker
- Phishing link checker
- Check if a link is safe to open
- Free website vulnerability scanner
- SaaS security checklist for founders
- Website clone checker
- YouTube & TikTok scam video checker
- Security trust badge for your website
- Fake website checker
- Suspicious link checker
- How to check a domain's age
- Where does a short link go?
- Is this video a scam?
- Celebrity deepfake scam videos
- Betting signal bots and VIP groups
- How to report a scam video
- How to find cloned websites of your brand
- Free typosquatting domain checker
- How to take down a fake website
- Brand protection and domain monitoring
- Homograph domain attack checker
- How to report a phishing domain to Google