Make scenario security · local export checker

Check your Make scenario before you share it.

A blueprint can carry mapped values and HTTP settings alongside the scenario structure. Review those settings before a handoff, a template release or a production change.

Check a Make export

Free · no signup · JSON stays on your device

1. Choose your export

Make blueprint JSON

2. Review supported checks

Static analysis in a local browser worker

3. Apply the fixes

Download a report without secret values

What the Make checker looks for

Credentials in mapped fields

Checks mapper and parameter values, including named HTTP headers. Make connection references are not treated as embedded credentials.

HTTP and certificate settings

Checks HTTP modules for plain HTTP destinations, credentials in URLs and an explicit rejectUnauthorized: false setting.

Mapped request destinations

Marks expression-based HTTP destinations for review. It does not assume that every mapped URL is attacker controlled.

Export from Make

  1. Open the scenario in Make.
  2. In the Scenario Builder, open the three-dot menu and choose Export blueprint.
  3. Choose the downloaded JSON in the checker. Router branches and error handlers are included in the review.
Make blueprint export guide

Before you check an export

Does my workflow leave this browser?

The checker reads the JSON in this browser and analyzes it in a local worker. It does not upload the workflow, connect an account, contact its URLs or run its code. The checker route is excluded from VAS analytics and session replay.

Does this replace a full security review?

No. It checks supported exported settings. It cannot verify connection permissions, platform or instance security, upstream gateways, arbitrary code behavior or runtime data flow. No findings is not a security certification.

What is included in the downloaded report?

Fixed finding descriptions, severity, review guidance and numeric workflow/step positions. Names, IDs, input paths, URLs, code, samples and credential values are omitted. Positions follow export traversal order and may differ from canvas numbering.

Is this the same as the VAS platform integrations?

This checker reviews automation exports. The separate VAS integrations retrieve existing website-security reports inside an automation platform. Their availability and setup requirements are described on the integration pages.

Independently developed by Silex Dev. Platform names describe compatible export formats; they do not imply endorsement of this checker.