What Tablif read on DotenvScan's site
DotenvScan describes itself as: “Website vulnerability scanner for exposed .env files — DotenvScan”
- Stage: Live, no waitlist
What it is
Calls itself “website vulnerability scanner”.
- Calls itself: website vulnerability scanner
“Free website vulnerability scanner: is yourenv file exposed, or a wp-config.php backup, phpinfo page orgit folder?”
Where it puts itself
Rules out “Nothing stored”.
- Says it will not: Nothing stored
“Nothing stored”
How it runs
A web app. Hosted in the cloud.
- Kind: web
- Runs where: cloud / hosted
“Free website vulnerability scanner”
“Free website vulnerability scanner: is yourenv file exposed, or a wp-config.php backup, phpinfo page orgit folder? Checks from outside and stores nothing.”
What it works with
Names ServerSecretVault, WP Server Guard and 1 more on its pages.
- Names: ServerSecretVault · WP Server Guard · WPSalt
“DotenvScan is a free website vulnerability scanner for exactly that”
“Explore ServerSecretVault”
What it offers as proof
Live, no waitlist. Publishes docs.
“Guides -> https://dotenvscan.com/guides/”
Sources
Tablif read these pages, last on 17 Oct 2026. Everything above is what the product says about itself; Tablif does not verify every claim.
Similar products in Tablif Town
- Soryvex: External website security assessment
- ServerSecretVault: Find and audit exposed .env & wp-config files on Linx
- Cerberus Scan: Self-hosted website security with Lighthouse, ZAP & Nuclei
- karmakoders: You Vibe-Coded It. Now Security-Check It.
- RepoGuardBZE: Scan Repositories for exposed secrets and keys
- EnvTrace: Check fingerprint, IP & WebRTC before you log in
- AllClearly: Free security scan for AI-built websites, in plain English
- VulnCue: Real CVE data for your WordPress plugins, plus built-in 2FA