This product was not featured by Product Hunt yet. It will not be visible on their landing page and won't be ranked (cannot win product of the day regardless of upvotes).
Product upvotes vs the next 3
Waiting for data. Loading
Product comments vs the next 3
Waiting for data. Loading
Product upvote speed vs the next 3
Waiting for data. Loading
Product upvotes and comments
Waiting for data. Loading
Product vs the next 3
Loading
DotenvScan
Check if your .env and secret files are publicly exposed
Free website vulnerability scanner: is yourenv file exposed, or a wp-config.php backup, phpinfo page orgit folder? Checks from outside and stores nothing.
Hey Product Hunt 👋
I clean up hacked WordPress and PHP sites for a living, and a surprising number of breaches start with something boring: a .env file, a wp-config.php.bak or a .git folder that anyone can download straight from the browser. One exposed file can hand over database passwords, API keys and cloud credentials.
So I built DotenvScan: enter a domain and it checks 17 common secret/config paths from the outside (.env and its variants, wp-config.php backups, phpinfo pages, laravel.log, .git/config, .svn, .aws/credentials, .DS_Store) and tells you which are exposed, protected or not found.
A few things I cared about:
• Free, no signup
• Plain GET requests only, nothing intrusive
• File contents and results are never shown, logged or stored
• Public sites only, no internal addresses
It's deliberately narrow: it doesn't test XSS, SQLi, plugins/CVEs or headers. It answers one question fast: are your secrets sitting on the open web?
Would love your feedback, and tell me which paths you'd like added next!
About DotenvScan on Product Hunt
“Check if your .env and secret files are publicly exposed”
DotenvScan was submitted on Product Hunt and earned 0 upvotes and 1 comments, placing #241 on the daily leaderboard. Free website vulnerability scanner: is yourenv file exposed, or a wp-config.php backup, phpinfo page orgit folder? Checks from outside and stores nothing.
On the analytics side, DotenvScan competes within WordPress, Developer Tools and Security — topics that collectively have 546.2k followers on Product Hunt. The dashboard above tracks how DotenvScan performed against the three products that launched closest to it on the same day.
Who hunted DotenvScan?
DotenvScan was hunted by christoph. A “hunter” on Product Hunt is the community member who submits a product to the platform — uploading the images, the link, and tagging the makers behind it. Hunters typically write the first comment explaining why a product is worth attention, and their followers are notified the moment they post. Around 79% of featured launches on Product Hunt are self-hunted by their makers, but a well-known hunter still acts as a signal of quality to the rest of the community. See the full all-time top hunters leaderboard to discover who is shaping the Product Hunt ecosystem.
For a complete overview of DotenvScan including community comment highlights and product details, visit the product overview.
christoph