secret-scanner

High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.

Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.

Protect your secrets using Gitleaks-Action

🔪 Scan memory for secrets and more. Maybe eventually a full /proc toolkit.

Scan for secrets, endpoints, and other sensitive data after decompiling and deobfuscating Android files. (.apk, .xapk, .dex, .jar, .class, .smali, .zip, .aar, .arsc, .aab, .jadx.kts).

GPU-accelerated secret scanner for code, Git history, containers, cloud, browser assets, and CI. 923 detectors, live verification, CUDA, Metal, WGPU.

command-line tool designed to rapidly scan decompiled Android applications for hardcoded secrets. It moves beyond simple keyword searching by using a powerful regex engine to identify high-entropy strings, specific key patterns, and other sensitive data that could pose a security risk.

Statically compiled, zero-dependency Git pre-commit secret scanner and credentials detector written in Go. An alternative to Gitleaks and git-secrets.

Regex based secret scanner for sccm deployment points sccmcontentlib$ shares. Find secrets automatically and download entire packages for deeper analysis.

fully autonomous credential intelligence platform that discovers, │ │ extracts, correlates, verifies, and reports exposed secrets across your │ │ target's entire attack surface.

A secrets scanner for Confluence - For red teamers and pentesters

AI-powered secret scanner for code and git history. Finds leaked API keys, tokens and credentials with near-zero false positives by pairing Rényi entropy detection with LLM adjudication. Runs as a CLI, pre-commit hook, GitHub Action, MCP server or Claude Code hook. Single Go binary, MIT licensed.

High-speed Git history forensic scanner. Detects and locates leaked API keys, Stripe secrets, and credentials buried deep within repository commit patches.

A sarcastic list of secret scanners

Keep API keys out of your coding agents: hooks that block the leak in Claude Code, Codex and Gemini CLI, a scan for what already leaked in the logs of 14 agents, and a scrub.

Read-only secret scanner for Confluence pages, history, comments, and attachments.

Local-first LLM secret scanner — scan ChatGPT, Claude, Cursor & Kimi K3 chat history for leaked API keys, PII & credentials. HTML dashboard + rotation guides.

A local-first security layer that helps prevent accidental leaks of secrets, API keys, and PII to AI coding agents, developer tools, and chats.

An advanced secret scanning tool designed to identify sensitive information, such as API keys and tokens within your given urls.

Schema-aware secret scanner for cloud logs with regex filtering, Shannon entropy analysis, and JSON structural tracking.