🔓 🔓 Find secrets and passwords in container images and file systems 🔓 🔓
Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more
Nosey Parker is a command-line tool that finds secrets and sensitive information in textual data and Git history.
Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.
Secrets Patterns DB: The largest open-source Database for detecting secrets, API keys, passwords, tokens, and more.
Entropy is a CLI tool that will scan your codebase for high entropy lines, which are often secrets.
Scan your code for security misconfiguration, search for passwords and secrets. 🔍
Searches through git repositories for high entropy strings and secrets, digging deep into commit history
Identify hardcoded secrets in static structured text
GitGuardian Shield GitHub Action - Find exposed credentials in your commits
The missing middleware for your configuration and secrets.
Secret and/or credential patterns used for gf.
SecretOpt1c is a Red Team tool that helps uncover sensitive information in websites using ACTIVE and PASSIVE Techniques for Superior Accuracy!
VMClarity is a tool for agentless detection and management of Virtual Machine Software Bill Of Materials (SBOM) and vulnerabilities
Identify hardcoded secrets in static structured text (version 2)
Scans every git push to your Github organisations to find unwanted secrets.
Python API client library for the GitGuardian API
Official TruffleHog Burp Suite Extension. Scan Burp Suite traffic for 800+ different types of secrets (API keys, passwords, SSH keys, etc) using TruffleHog.
Add a description, image, and links to the secrets-detection topic page so that developers can more easily learn about it.
To associate your repository with the secrets-detection topic, visit your repo's landing page and select "manage topics."