🔓 🔓 Find secrets and passwords in container images and file systems 🔓 🔓

• UpdatedApr 24, 2025
• Go

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

• UpdatedDec 14, 2025
• Go

Nosey Parker is a command-line tool that finds secrets and sensitive information in textual data and Git history.

• UpdatedNov 14, 2025
• Rust

Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.

• UpdatedDec 17, 2025
• Python

Secrets Patterns DB: The largest open-source Database for detecting secrets, API keys, passwords, tokens, and more.

• UpdatedAug 6, 2025
• Python

Entropy is a CLI tool that will scan your codebase for high entropy lines, which are often secrets.

• UpdatedMar 21, 2025
• Go

Scan your code for security misconfiguration, search for passwords and secrets. 🔍

• UpdatedJun 23, 2023
• JavaScript

Searches through git repositories for high entropy strings and secrets, digging deep into commit history

• UpdatedDec 16, 2025
• Python

Identify hardcoded secrets in static structured text

• UpdatedOct 11, 2023
• Python

GitGuardian Shield GitHub Action - Find exposed credentials in your commits

• UpdatedNov 14, 2025

The missing middleware for your configuration and secrets.

• UpdatedDec 1, 2025
• TypeScript

Secret and/or credential patterns used for gf.

• UpdatedFeb 10, 2023
• Shell

SecretOpt1c is a Red Team tool that helps uncover sensitive information in websites using ACTIVE and PASSIVE Techniques for Superior Accuracy!

• UpdatedSep 6, 2024
• Shell

Benchmarking repo for secrets scanning

• UpdatedAug 18, 2024
• Python

Monitors Github for leaked secrets

• UpdatedOct 25, 2024
• Python

VMClarity is a tool for agentless detection and management of Virtual Machine Software Bill Of Materials (SBOM) and vulnerabilities

• UpdatedOct 14, 2024
• Go

Identify hardcoded secrets in static structured text (version 2)

• UpdatedFeb 5, 2025
• Python

Scans every git push to your Github organisations to find unwanted secrets.

• UpdatedMay 1, 2025
• Go

Official TruffleHog Burp Suite Extension. Scan Burp Suite traffic for 800+ different types of secrets (API keys, passwords, SSH keys, etc) using TruffleHog.

• UpdatedMar 12, 2025
• Python

Python API client library for the GitGuardian API

• UpdatedNov 27, 2025
• Python