Content is not executed; only explainable static patterns and bounded browser operations are applied.
52
Code & file security
Code Security Pre-Scan
Scans code in a time-bounded Web Worker with explainable regex rules and reports eval, innerHTML, shell commands, SQL concatenation, weak hashes, and possible secrets with line numbers. It cannot understand full builds or data flow and does not replace SAST or expert review.
✓ Free✓ No account✓ In-browser
QUICK ANSWER
What does this tool do?
Find risky APIs, dangerous sinks, weak crypto, and embedded-secret patterns locally in source code.
Result
Your result will appear here.
APPLICATION AND DECISION GUIDE
Code Security Pre-Scan: method and usage
Scans code in a time-bounded Web Worker with explainable regex rules and reports eval, innerHTML, shell commands, SQL concatenation, weak hashes, and possible secrets with line numbers. It cannot understand full builds or data flow and does not replace SAST or expert review.
synthetic or minimized code, configuration, identifiers, or file content you are authorized to review Confirm the shape first with a small example containing no personal data.
evidence locations, severity, false-positive considerations, and the next verification action
Practical steps
- Paste only source code you are authorized to inspect.
- Choose a language and run the local time-bounded scan.
- Verify each finding against data flow and context; rotate exposed secrets immediately.
manual review at the source location and independent verification with an appropriate professional security tool or authorized process
Code is not executed, and no finding does not prove the absence of vulnerabilities.
Suitable use cases
- Pull-request pre-checks
- Secret discovery in snippets
- Preparing for security review
LEARN THE WORKFLOW
Guides for this tool
PWA Installation and Offline Caching: A Privacy-First Design Guide
Understand web app installation, the service worker lifecycle, and cache boundaries that keep sensitive inputs out of persistent storage.
Read guide →How to Security-Audit Open-Source Browser Tools
A practical checklist for validating privacy claims through source, dependencies, network requests, CSP, and history.
Read guide →ABOUT THIS TOOL
Frequently asked questions
What input does Code Security Pre-Scan accept?+
synthetic or minimized code, configuration, identifiers, or file content you are authorized to review Paste only source code you are authorized to inspect.
What does Code Security Pre-Scan return?+
evidence locations, severity, false-positive considerations, and the next verification action Content is not executed; only explainable static patterns and bounded browser operations are applied.
How should I validate Code Security Pre-Scan output?+
manual review at the source location and independent verification with an appropriate professional security tool or authorized process
Does Code Security Pre-Scan send or store input on a server?+
Tool input is processed in the active tab. Saving to the Workstation or transferring to another tool is a separate choice. Consider browser extensions and shared devices separately; the privacy page explains advertising and network connections.