🛡️
Paya Scanner

Repositories

Loading repositories…

Scanning repositories…

0 / 0 files 0% 0s elapsed
Preparing…
0 issues found

Scan Results

Scan Pasted Code

Detection Rules

Loading…

⚡ Auto-Scan on Push

Automatically scan changed files whenever a developer pushes to any branch. Results are emailed instantly.

📋 How to set up
1
Configure belowAdd your GitHub token, SMTP settings and recipient emails.
2
Register webhookGitHub repo → Settings → Webhooks → Add webhook. Paste the URL & secret.
3
Push codeEvery push triggers a scan. An email report lands in your inbox seconds later.
Webhook URL (paste into GitHub)
⚠️ GitHub must reach this URL from the internet. For local dev use ngrok: ngrok http 5050 then use the https://xxxx.ngrok.io/webhook URL.
🔑 GitHub Token for Webhook Scans
PAT with repo + read:user scope. This fetches pushed files for scanning.
🔒 Webhook Secret
Paste this into the GitHub webhook "Secret" field to verify requests.
⚡ Webhook Enabled
Pause scanning without removing the webhook from GitHub.
📧 Email (SMTP) Settings
Scan results are emailed after every push. Works with Gmail, Outlook, or any SMTP provider.
Add your email, your project manager's email — anyone who should always receive a copy (comma-separated).
✨ Auto-detect: The developer who pushed code is automatically identified from the GitHub webhook and receives the alert directly — no manual config per developer needed. Everyone in CC above also gets a copy of every scan result.
💡 Gmail: use an App Password — Google Account → Security → 2-Step Verification → App passwords.
🔒 Change Login Password
Update the shared password used to log in with a @payasystems.com email.

Auto-Scan History

Loading history…

👥 User Management

Only @payasystems.com email addresses can be added
+ Add New User
All Users
Loading users…