NGC EnvShield
Catch leaked API keys and .env drift before you commit — offline, local, $0 cloud cost.
Publisher: nextgencode · Works in VS Code / Cursor / Open VSX clients.
Free vs Pro ($4.99 lifetime · Stripe)
|
Free |
Pro |
| Scan open file + save highlights |
✅ |
✅ |
| Full workspace scans |
5 / month |
Unlimited |
| Findings visible |
2 samples + counts |
Full list |
| Report UI |
Blurred “This is what Pro looks like” preview |
Unlocked |
| Leak Timeline (git blame) |
Preview / locked |
✅ |
| .env Diff Guard |
Counts only |
Full key lists |
| Secret fingerprints |
Tease |
✅ |
| Canary trap secrets |
❌ |
✅ |
| Redact-on-Copy |
✅ |
✅ |
| Ship Gate |
✅ |
✅ |
Buy: Command Palette → EnvShield: Buy Pro (Stripe $4.99)
Checkout: Stripe Payment Link
Activate: EnvShield: Activate Pro License (NGC-ES-XXXX-XXXX-XXXX)
Unique (hard to copy as a bundle)
- Leak Timeline — when the secret line entered git (local blame)
- .env Diff Guard —
.env vs .env.example missing / extra / empty
- Redact-on-Copy — clipboard gets masked secrets
- Canary secrets — plant
ngc_canary_… trap tokens
- Commit Context Heatmap — staged-file hit weighting
- Secret fingerprints — local hashes to spot the same secret in many files
- Ship Gate — clear/block before release
- Pro blur preview — real scan data under glass, not fake marketing
Quick start
- Open a folder
EnvShield: Scan Workspace- Free: see counts + 2 samples + blurred Pro panel
- Pro: unlock full report
Status bar: EnvShield 5/5 (free remaining) or EnvShield PRO ✓
Commands
- EnvShield: Scan Workspace
- EnvShield: Scan Open File
- EnvShield: .env Diff Guard
- EnvShield: Leak Timeline (Pro)
- EnvShield: Create Canary Secret (Pro)
- EnvShield: Ship Gate Check
- EnvShield: Redact Selection → Clipboard
- EnvShield: Buy Pro / Activate License
Privacy
All scanning is local. No secret values are uploaded. Stripe checkout opens in the browser only when you click Buy Pro.
License
Free tier OK for personal & commercial use. Pro requires a paid Stripe license. See LICENSE.
| |
