Exposure Check

Is something exposed
that nobody should see?

A reachable .git, a .env with secrets, a database backup in the web root — Vernax actively probes for accidentally published paths and confirms every hit against the real content.

This check requests potentially confidential paths and therefore only runs on domains verified in your workspace.
20+Paths
5Checks
EUHosting

vernax.app

Example result

100

/ 100

Version control (.git)OK
Environment files (.env)OK
Backups & databasesOK
Config & metadata filesOK
Admin panels & listingsOK

What is checked

Code & secrets

  • .git/ directory
  • .env / .env.production
  • Source code leak
  • Secret exposure

Data

  • SQL dumps (backup.sql)
  • Archives (.zip, .tar.gz)
  • SQLite databases
  • wp-config.php.bak

Access

  • phpMyAdmin
  • Traefik dashboard
  • Directory listings
  • .htpasswd

Safely checked

  • Content signature, not status code
  • Soft-404 detection
  • No content stored