Sensitive File Scanner: Automatic scan for unintentionally exposed sensitive files.

Hi all The idea for the sensitive file scanner was born after we scanned ~2.6 million main domains for the exposure of sensitive files like .env-files from Laravel, php files containing the phpinfo(), exposed .git folders or .DS_Store files. During our scan we found hundreds of users and passwords for email accounts or databases, many API keys and secrets, even several banking API credentials. Imagine what we will find if we have a look at all the subdomains to... 🤯 For every developer it is clear that such files should not be public, however it happens so fast that these files become public. To detect these mishaps, we thought we can refine our scanning code an make a service (SAAS) out of it, which is easy to use and affordable (a cup of ☕️ per month). Our target audience for the sensitive file scanner are developers, devops-engineers or IT managers. To use our tool, you do not need a great technical understanding. We are looking for feedback ❓ how we can improve the scanner that it brings even more value for the user. Current features 🤩: - Daily scans for exposed sensitive files - Automatic subdomain detection - Immediate notification on detection of an issue - More than 35 detection rules, being expanded constantly - No complex and complicated setup, just start in a few minutes We are happy to hear your feedback, so we can improve and extend this product. Have a nice day P.s. If you are interested in more background information how we did the scan of the ~2.6 million domains and what we learned from it, we are happy to answer your questions too.