Scan locally
Choose code in your browser. BeforePush checks supported secret patterns and shows the file and line.
BEFORE THE PUSH
Everything you need to ship safer.
Scan selected files privately, understand a finding with Gemma 4, and add a lightweight local guard to your Git workflow.
Open the scannerScan in your browserSelected files are read locally
Redact before AIGemma gets finding context only
Guard the next commitDownload a local Git hook
01 / LOCAL SCAN
Check your project before you push.
Choose a folder or a few code files. Scanning happens right here in your browser.
01
Choose what to scan
Your files are not uploaded. Pick a whole project or just a few files.
02 / SCAN RESULTS
Your findings
VALUES REDACTED
Files inspected0
Findings0
Critical0
High0
HOW IT WORKS
A small check before a big mistake.
Three straightforward steps, designed to fit the way developers already work.
Understand the fix
Ask Gemma 4 for plain-language remediation. The secret itself is redacted before the request.
Add a commit guard
Download the pre-commit hook and install it in your repository to block supported patterns in staged changes.
THE PRIVACY BOUNDARY
AI should help fix the leak—not receive it.
BeforePush separates local detection from AI guidance. The browser keeps the code; the server keeps the API key; Gemma receives only redacted context after you choose to ask.
Project filesStay in your browser
Raw secret valueRedacted before the request
Gemma 4 receivesRule · severity · file type · redacted line
API credentialStored server-side