Stripe security check

Check if your Stripe secret key is exposed

Scans your live app for Stripe live-mode secret keys (sk_live_...) in the client bundle. Results in under 60 seconds.

A Stripe live-mode secret key in your client bundle gives anyone who visits your site the ability to create charges, issue refunds, and access customer data. This scanner fetches your live URL and checks the HTML source and first JavaScript bundle for the sk_live_ pattern. If found, rotate the key immediately in the Stripe dashboard and move it server-side.