FLOW ANALYZER

Power Automate Security Scanner · eusebio@it-sec

▲

Drop Flow JSON here

or click to browse
Exported .json from Power Automate

— or paste JSON directly —

Flow Name (optional — overrides JSON)

Environment

//  Analysis Rules

Hardcoded SecretsAPI keys, passwords, tokens in values

HTTP SecurityPlain HTTP, missing auth, open endpoints

Risky ConnectorsConsumer services, social media, file shares

Error HandlingMissing try/catch, unconfigured run-after

Data Exfil PatternsExternal sends, email forwards, file writes

Overprivileged AccessBroad SharePoint, Dataverse scopes

DLP ViolationsCross-boundary connector mixing

Sensitive Data HandlingPII, passwords in compose/variables

//  Sensitivity Level

Report Threshold

//  How to Export a Flow

// Method 1 — Export from Power Automate Portal 1. Go to make.powerautomate.com
2. Open the flow you want to analyse
3. Click ⋮ (three dots) → Export → Package (.zip)
4. Unzip the package → inside is a definition.json file
5. Paste the contents of that file here

// Method 2 — PowerShell / Power Platform CLI

            # Install CLI

            npm install -g @microsoft/powerplatform-cli

            # Export flow

            pac flow export --flow-id <GUID> --output flow.json

// Method 3 — Load Sample for Demo Click Load Sample Flow below to analyse a pre-built example flow with security issues already embedded.

ⓘ NOTE: This tool runs entirely in your browser. No flow data is sent to any server.

SCAN

eusebio@it-sec:~/tools/flow-analyzer$ awaiting input

Upload or paste a Power Automate flow JSON,
then click Analyze Flow

or click "Load Sample Flow" to see a demo scan