How it works Scan ChecksBeta

Web scanner

Scan a public repo right now

Paste any public GitHub repository URL and get an instant security report. No signup, no install, no auth.

github.com/owner/repo

GitHub repository URL

Deployed app URL

Verify supported secretsOpt-in live checks for GitHub, Stripe, and HuggingFace tokens.

Try a sample

Read-only. We never modify your repository.

RepoSec

A read-only GitHub repo security scanner. Static rules, no installs, no auth. Open source under MIT.

Product

Checks
How it works
Scan a repo

Promise

Read-only, never mutates your repo
Public repos only, no auth required
Heuristics are transparent and masked

© 2026 RepoSec. Defensive security for open source.

Built on Next.js 16 and the public GitHub API.