Skip to main content
Code Scan allows you to analyze source code directly for leaked secrets, credentials, and other sensitive data. Instead of scanning a live URL, you provide code content for analysis.

How to Run a Code Scan

  1. Navigate to the Scans page in your workspace
  2. Click the + button next to Domain Scan to open the scan type selector
  3. Select Code Scan from the dropdown
  4. Paste your code or upload code files for analysis
  5. Click the Start Scan button

When to Use Code Scan

Code Scan is useful for:
  • Checking source code before committing to a repository
  • Analyzing JavaScript bundles for hardcoded secrets
  • Scanning configuration files for exposed credentials
  • Auditing code snippets from any source