Integrations / Netlify

    Junglewise for Netlify

    Sign in with Netlify and Junglewise watches every site your account can see. It follows each deploy and each site's settings, flags secrets that would ship to the browser and sites that still answer over plain HTTP, explains what matters, and drafts the fix. Junglewise only reads: nothing in your sites changes unless you change it.

    Sign in with Netlify. Read access. About 1 min to set up.

    Connecting Netlify

    How you connect it

    1. Step 1

      Sign in with Netlify and authorize Junglewise. Netlify grants the app the same access as the member who signs in, so use an account with read access.

    2. Step 2

      Junglewise lists every site it can see and watches them all; switch any off from the Sources page.

    3. Step 3

      It reads the sites and their latest deploys straight away. Setup takes about a minute.

    What Junglewise reads

    Watched around the clock

    • Deploys

      Every deploy and how it ended, so a failed production deploy is noticed.

    • Environment variables

      Which variables reach the browser, and which of those look like secrets that should stay on the server. Junglewise reads names and scopes, not the values.

    • HTTPS

      Whether each site with a custom domain forces HTTPS.

    • DNS zones

      The zones Netlify manages for you, which the agent reads when it investigates a domain.

    What it changes

    Nothing. It drafts the fix.

    • Keep a secret on the server

      Which variable to rename or rescope, so the secret stops shipping to the browser.

    • Force HTTPS

      The site setting to turn on so plain HTTP requests are redirected.

    • Rotate an exposed secret

      Step by step: issue a new one at the provider, update the variable, redeploy, then revoke the old one.

    Junglewise only reads from Netlify, so every fix is yours to apply. It checks afterwards that the fix worked.

    Netlify questions

    Can Junglewise change my Netlify sites?
    No. Junglewise only reads, and drafts each fix for you to apply. It then checks that the fix worked.
    Does Junglewise see my secret values?
    No. It looks at variable names and scopes, which is enough to tell a secret that reaches the browser from one that does not.
    How do I disconnect?
    Revoke Junglewise under Authorized applications in your Netlify user settings. Junglewise loses access immediately.

    See what's lurking out there. It takes a minute.

    Start with a free scan of your domain. When you're ready for the inside view, try Team free for 14 days.

    Start 14-day free trial