fully autonomous credential intelligence platform that discovers, │ │ extracts, correlates, verifies, and reports exposed secrets across your │ │ target's entire attack surface.

The first secret scanner that fixes what it finds. Free, open source.

Browser extension that finds API keys leaked in your own web projects and audits their access & billing exposure. Supports Google, OpenAI, Anthropic, OpenRouter, xAI & Twilio.

SigilGuard provides a high-level Elixir API for the SIGIL Protocol, securing MCP (Model Context Protocol) tool calls and AI agent interactions.

MCP server detecting leaked secrets/credentials (32+ provider rules). In the official MCP Registry: io.github.eltociear/secrets-audit-mcp. Pure stdlib, zero deps.

GitHub Action for secretlint: scan PRs for leaked secrets & credentials in CI — zero config, fail on detection

X-Ways Forensics X-Tension wrapping TruffleHog v3 for per-item secret scanning across volume snapshots.

High-performance secret detection engine with 131 provider rules (Go)

Write protection and credential scanning layer for AI agent deployments. Intercepts filesystem writes, validates scope boundaries, and builds security awareness through adaptive user education. Python 3.10+, no dependencies.

🔐 Scan repos for secrets, API keys & PII before going public. Integrates TruffleHog, Gitleaks & Presidio with auto-remediation.

Git secret scanner and protection tool - prevent API keys, passwords, and credentials from being committed (Dual Licensed: GPL v3 / Commercial)

🔒 Real-time secret detection for VS Code - Scan code for AWS, GitHub, Stripe, Slack credentials and 40+ more patterns. Privacy-first, local processing.

Advanced Secrets & API Key Scanner - Protect Your Code, Protect Your Business

Credfence is a high-performance secret and credential scanning engine built in Rust. It detects exposed API keys, tokens, and secrets in Git repositories and is designed to run as a CLI, in CI pipelines, or as a scalable async worker service.

Multi-layer Git secret scanner using regex + entropy analysis + LLM verification to detect exposed API keys, credentials, and sensitive data in commit history. Built with Python for security auditing and DevSecOps workflows

ML-powered API key and secret detection in code. Fine-tuned CodeBERT with 97% accuracy. Free to train and run.