🛡️
Paya Scanner

Repositories

Loading repositories…

Scanning repositories…

0 / 0 files 0% 0s elapsed
Preparing…
0 issues found

Scan Results

Scan Pasted Code

Detection Rules

Loading…

⚡ Auto-Scan on Push

Automatically scan changed files whenever a developer pushes to any branch. Results are emailed instantly.

📋 How to set up
1
Configure belowAdd your GitHub token, SMTP settings and recipient emails.
2
Register webhookGitHub repo → Settings → Webhooks → Add webhook. Paste the URL & secret.
3
Push codeEvery push triggers a scan. An email report lands in your inbox seconds later.
🌐 Server Public URL
The publicly accessible URL of this scanner. Used in GitHub PR check "View Details" links and commit status links.
Leave blank to use localhost (only works on your machine).
💡 For local dev: run ngrok http 5050 and paste the https://xxxx.ngrok.io URL here. Save settings, then use the webhook URL below.
Webhook URL (paste into GitHub)
⚠️ GitHub must reach this URL from the internet. Use the Server Public URL above — that's what becomes your webhook endpoint.
🔑 GitHub Token for Webhook Scans
PAT with repo + read:user scope. This fetches pushed files for scanning.
🔒 Webhook Secret
Paste this into the GitHub webhook "Secret" field to verify requests.
⚡ Webhook Enabled
Pause scanning without removing the webhook from GitHub.
📧 Email (SMTP) Settings
Scan results are emailed after every push. Works with Gmail, Outlook, or any SMTP provider.
Add your email, your project manager's email — anyone who should always receive a copy (comma-separated).
✨ Auto-detect: The developer who pushed code is automatically identified from the GitHub webhook and receives the alert directly — no manual config per developer needed. Everyone in CC above also gets a copy of every scan result.
💡 Gmail: use an App Password — Google Account → Security → 2-Step Verification → App passwords.
🔒 Change Login Password
Update the shared password used to log in with a @payasystems.com email.

Auto-Scan History

🔧
Fix Stuck PR Status
PR check stuck at "Scanning for secrets…"? Re-scan the commit and push the correct status to GitHub.
Loading history…

👥 User Management

Only @payasystems.com email addresses can be added
+ Add New User
All Users
Loading users…