Review locally. Share with control.
v0.5.11 ● Files stay in your browser Preparing offline application … Install SecretShield SHARE WITH CONTROL Your project. Without your secrets. Open a folder, review every replacement and create a sanitized ZIP copy.
Install SecretShield to work with files File and folder import is disabled in this browser tab. Install SecretShield using the button above or your browser menu, then launch it from your desktop or app launcher. In the installed app, files are processed locally; they are not uploaded to our server.
Installation instructions
0 Files
0 Active replacements
0 Files reviewed
0 Excluded
No file selected Original files remain unchanged.
Next file → Mark as reviewed
ORIGINAL Read only SANITIZED COPY Export preview
REPLACEMENTS Review each change
Detected findings appear here.
© 2026 by DSLM IT CONSULTING - FZCO
Settings Close Lists are saved automatically in this browser. Exported settings files contain your custom sensitive values in plain text. Store them carefully; they do not belong in the sanitized project ZIP.
Exclusion rules · Never include these files in the ZIP One pattern per line. *.pem matches in any folder; **/backups/** excludes directories. data/** excludes the folder data directly below the project's root folder. The list is saved locally and restored next time. Private keys are flagged in supported text files regardless of extension. Choose per file: exclude the whole file or replace only the key. Export stays disabled until you decide.
Applying rule changes rescans the project and resets review decisions.
Apply rules Load defaults
Lists are automatically saved in this browser.
Custom sensitive values For example, a customer name or internal domain. One exact value per line (at least 4 characters). Values are also saved locally and applied to new imports. Clearing site data deletes the lists.
Apply rules Project lists Save the current exclusion rules and custom values under a project name, for example to exclude the folder data only for that project. Loading a project list replaces both lists and then rescans the open project; review decisions are reset. Project lists are stored in this browser and contain custom values in plain text.
Save current lists
Load & scan Delete
Forget saved decisions …
Whenever you click "Undo replacement" (keep the original value), SecretShield remembers it for this project, identified by its root folder name, and applies it automatically at the next scan. Only hashes are stored, never the values themselves. If a value or its surrounding text changes, it is replaced again. Limits: projects with the same root folder name share their decisions; "Mark as reviewed" and private-key decisions are not remembered.
Export settings … Export to new file … Import settings …
Import settings?
Existing lists will be replaced. Any open project will be rescanned, resetting review status and replacement decisions.
Cancel Import and apply
Install SecretShield
Open SecretShield online in a browser that supports app installation. Click Install SecretShield below if available. Otherwise use your browser’s app installation command, usually in the address bar or browser menu. Confirm installation, then open SecretShield from your Start menu, launcher or the shortcut created by your browser. Keep the first session online until the status bar says Offline application saved . You can then disconnect your network and import, scan, review and export files locally.
If no install option is available, try opening this page directly in a supported browser such as Chrome or Edge. Installation controls vary by browser and operating system. You can still use SecretShield in a normal browser tab.
Install SecretShield Close
Open-source credits Open source & supported files Detection: Secret Remover (MIT), bundled locally. Includes 204 browser-compatible Gitleaks rules (MIT) and configuration rules. This is a browser adaptation, not the full Gitleaks engine. ZIP: fflate (MIT). Gitleaks license . Scanner license · ZIP license . Supported: readable UTF-8 text files up to 2 MB. PDF, Office, images, binary files, nested archives and .git are excluded. No files, values or mappings are uploaded. Exclusion rules and custom values are saved locally in this browser; project files and detected secrets are not stored persistently.
Close Support SecretShield SecretShield is free - and it will stay free.
We develop and maintain SecretShield because we believe useful tools should be available to everyone. There is no paid version, no hidden features and no subscription.
If SecretShield saves you time or helps your work, you can support its ongoing development with a voluntary contribution of any amount. Your support helps us cover development, hosting and updates.
https://www.paypal.com/ncp/payment/L2AFK7238W7CA
You can pay with your PayPal account or by credit/debit card - no PayPal account required.
Good to know Voluntary: Your contribution is entirely optional. You can keep using SecretShield with all features at no cost, whether or not you contribute.No additional services: A contribution does not include a license, extra features, priority support or any other service.Not a charitable donation: Contributions are payments to DSLM IT CONSULTING - FZCO, a commercial company. They are not charitable donations and may not be tax-deductible.Receipt: PayPal sends you a payment confirmation automatically. If you need an invoice for your company, please contact us at support@dslm-itconsulting.com .Refunds: If you made a payment by mistake, contact us within 14 days at support@dslm-itconsulting.com and we will refund it.Thank you for your support - it really makes a difference!
Support this project ↗ Close
About SecretShield v0.5.11 SecretShield is free — and it will stay free.
Review project files locally, replace sensitive values and share a ZIP. Detection is not a security guarantee; manual review remains important.
For extra peace of mind, disconnect Wi-Fi or unplug your network cable after the offline application files have been saved. File import, scanning, review and ZIP export work locally. No project files are uploaded.
The application checks for updates only at startup. Your browser may perform independent service-worker checks. To guarantee no connection, disconnect your network.
Open-source detection: Secret Remover and browser-adapted Gitleaks rules (MIT). ZIP processing: fflate (MIT).
DSLM IT Consulting - FZCO Close Review export
Undone replacements retain the original values in plain text. The report contains file paths, decisions and counts, but no secret values.
Continue reviewing Download ZIP
New SecretShield version available
Activate the new version now? The application will restart.
Start current version Update and start
