Beta
Source code review
The website scanner only sees what's public. Upload a zip of your own source code for a deeper, code-level check.
Free to see what it finds · €35 to unlock the full report
What this checks
- Hardcoded API keys, secrets, and credentials left in code
- Which third-party processors (payment, email, analytics, etc.) your code integrates with
- Whether code exists to store consent records
- Whether code exists for data retention or deletion
- Whether code exists for encrypting sensitive data
What this cannot check, even from your code
Whether a Data Processing Agreement is actually signed with a processor, whether a retention job you have code for actually runs correctly in production, whether a Data Protection Officer is appointed, or whether a Records of Processing Activities document exists. Those are business facts, not code facts - a scan of any kind can't confirm them.
How your code is handled
Your upload is extracted in an isolated location, scanned as plain text (nothing is ever executed), and then permanently deleted immediately after analysis, success or failure - this happens regardless of whether you go on to pay. Only the findings (which file/line a pattern matched, not the matched values themselves for anything sensitive) are kept. Uploads are capped at 25 MB, 3,000 files, and 150 MB uncompressed.