Overview & core concepts

What the platform is, the tier model, and how storage degrades gracefully.

Passwordless OTP sign-in, the limits that apply, and disposable-email handling.

Plans, prices & quotas

Every SKU and quota, read live from the platform catalog.

Every tool on the platform, grouped by category, listed live from the catalog.

Multi-tenant log ingestion, detection and AI triage — with API examples.

QR enrolment, the installable PWA, posture signals and fleet reporting.

Seats, invitations, and the Team Security Center.

Free modules, progress sync, AI tutor, and verified certificates.

Authentication, every endpoint, rate limits and status codes.

What is never stored, the defences in force, and how to report a vulnerability.

// tool reference · Vulnerability & Assessment

Find hardcoded credentials, API keys and tokens in a blob of text or code.

Finds hardcoded credentials, API keys, tokens and private keys in code or config before they reach a repository.

Pre-commit review; auditing an inherited codebase; checking a config before sharing it.

Field names are the actual form parameters, verified against source.

Field	Type	Required	Notes
blob	textarea	required	Code or configuration.

Detected secrets by type and location, with remediation.

Deterministic pattern matching against known credential formats. Offline — your code is not transmitted.

Analysed in memory. Not stored. If a real secret is found, rotate it — detection means it existed in plaintext.

CWE-798 Hardcoded CredentialsOWASP Top 10