Drop a webroot, folder, or .zip. Detection runs entirely in your browser — files are never uploaded. We literally cannot see your source.
PHP · ASP · JSP · htaccess · scripts — scanned offline in this tab