Exposed .env file
A request for /.env, /.env.local, or /.env.production returns real environment variables.
Who this is for
Apps deployed by copying a project folder onto a host that serves every file.
What AppPulse does
We send a single GET for a short list of common secret files. A finding is recorded only when the body looks like that file, not when the host returns your homepage HTML for every path.
Why it matters
An exposed env file usually contains the database URL and every third-party secret at once.
What to tell your AI tool
Stop the host from serving dotfiles, remove the file from the deploy output, and rotate every value that was in it.