The sensitive file scanner scans your domain and subdomains automatically for data leaks (passwords, api keys, private keys, etc.) via unintentionally exposed files like .env files or Git repositories.