Find secrets with Gitleaks 🔑
Secret scanners
Find API keys, passwords and tokens committed to code, git history and other places they should not be.
Changes in this category (RSS)
Side by side
| Tool | Stars | Licence | Terms | Self-hosted | Language | Latest | Last push |
|---|---|---|---|---|---|---|---|
| Gitleaks | 30k | MIT | Open source | No | Go | v8.30.1 | 2026-09-30 |
| TruffleHog | 28k | AGPL-3.0 | Open source | No | Go | v3.98.1 | 2026-10-06 |
| ggshield | 2k | MIT | Open source | No | Python | v1.55.0 | 2026-10-06 |
| Kingfisher | 1.3k | Apache-2.0 | Open source | No | Rust | v2.10.0 | 2026-10-06 |
4 tools
Find, verify, and analyze leaked credentials
Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.
Detect secrets + live validation. Map blast radius. Revoke fast. Use the CLI or embed in Rust and Python.
- Language
- Rust
- Licence
- Apache-2.0
- Stars
- 1.3k
- Latest
- v2.10.0
- Last push
- 2026-10-06