Check /server-status
Check every response
Go to github
Search for key, secret, password, email,
gmail.com
, api, apikey, api_key
See response if the Server header is disclosing server info
See if Personal info is in the response