PyPI · crates.io
GitGuardian/ggshield
Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.
MITSep 17, 2026 · metrics 2.10.0
All tags
Catalogue tag
#secrets-detection
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
25 records
PyPI · Go
awslabs/ferret-scan
Find and redact sensitive data before it leaks — a fast, offline CLI and Go library that detects PII, secrets, and credentials in files and streams, scores them with context-aware confidence, and redacts them format-preserving. Nothing leaves your host.
Apache-2.0Sep 10, 2026 · metrics 2.10.0
PyPI · crates.io
duriantaco/skylos
Open source local-first PR scanner that finds dead code, security bugs, secrets, quality regressions, and AI-code mistakes before merge. For first timers refer to https://duriantaco.github.io/skylos/repo-map/
Apache-2.0Sep 15, 2026 · metrics 2.10.0
PyPI · crates.io · npm
hashgraph-online/hol-guard
Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.
Apache-2.0Sep 5, 2026 · metrics 2.10.0
Go · Maven
praetorian-inc/titus
High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.
Apache-2.0Sep 11, 2026 · metrics 2.10.0
PyPI · npm
Aletheore/Aletheore
Evidence-grounded repository audit CLI - deterministic scanner, MCP server, live dashboard, and a GitHub Action that posts PR diffs.
Custom licenseSep 27, 2026 · metrics 2.10.0
Go
betterleaks/betterleaks
Find leaked secrets everywhere.
MITOct 19, 2026 · metrics 2.10.0
PyPI
jimmy058910/jmo-security-repo
JMo Security Suite - Terminal-first security audit toolkit with many tools, multi-target scanning, & compliance
Custom licenseSep 15, 2026 · metrics 2.10.0
PyPI
cpeoples/ansible-security-scanner
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.
Apache-2.0Sep 9, 2026 · metrics 2.10.0
PyPI · npm · crates.io
redact-secret/redact-secret
Detect and redact secrets before they reach logs, storage, or LLM context. Deterministic Rust core for JavaScript, Python, Rust, and WebAssembly.
MITOct 10, 2026 · metrics 2.10.0
Go · npm · PyPI
ShieldNet-360/prompt-gate
Prompt Gate — privacy-first, on-device DLP for the AI era. Blocks unauthorized AI tools at the DNS layer and inspects content sent to approved tools for secrets/PII, entirely on-device.
MITSep 6, 2026 · metrics 2.10.0
crates.io
censgate/redact
Fast Rust engine for detecting and redacting PII and secrets — in prompts, code, and databases. OpenAI-compatible gateway, Postgres scanner, CLI, and WASM. 32× Presidio. Apache-2.0.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
draugr-dev/draugr
Run Trivy, Semgrep, Gitleaks and more from one file. Consolidates SAST, SCA, secrets, IaC and container findings into one SARIF report and one pass/fail gate for CI — ranked by real risk, and can fail a PR on new findings only.
Apache-2.0Sep 11, 2026 · metrics 2.10.0
npm · PyPI
sinewaveai/agent-security-scanner-mcp
Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination detection (4.3M+ packages), 1000+ vulnerability rules with AST & taint analysis, auto-fix.
MITOct 9, 2026 · metrics 2.10.0
npm · Go
HodeTech/Leakwatch
High-performance open-source secret scanner — detect, verify & report leaked API keys, tokens & credentials in code, Git history, container images, and the cloud.
MITSep 14, 2026 · metrics 2.10.0
Go
docker/portcullis
A tiny Go library to detect and redact API tokens, cloud credentials, and other secret material in arbitrary text.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
vaultcompasshq/conductor
Umbrella installer and combined report over the independently installable guardrail gates
MITSep 14, 2026 · metrics 2.10.0
Go
cc1a2b/JShunter
jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive data, such as API endpoints and potential security vulnerabilities, making it an essential resource for and bug bounty hunters and security researchers.
MITSep 6, 2026 · metrics 2.10.0
crates.io
kahramanemir/Vallum
Security boundary CLI proxy between AI coding agents and your shell — redacts secrets, neutralizes prompt injection, wraps untrusted terminal output, and audits every command. Single Rust binary.
Apache-2.0Sep 6, 2026 · metrics 2.10.0
PyPI
spark1security/n0s1
Secret Scanner for Slack, Jira, Confluence, Asana, Wrike, Linear, Zendesk, GitHub, and GitLab
GPL-3.0Sep 19, 2026 · metrics 2.10.0
Go
varalys/redactyl
Deep artifact scanner for cloud-native environments. Find secrets hiding in container images, Helm charts, Kubernetes manifests, and nested archives.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go · PyPI
Zayan-Mohamed/secscan
SecScan is a fast, configurable secret scanning tool written in Go that detects API keys, tokens, credentials, and high-entropy secrets across source code and full Git history. Built for developers and CI pipelines, with strong defaults and low false positives.
MITSep 12, 2026 · metrics 2.10.0
Go · npm
rezen/confessecrets
📿 🙏 A secret scanner for structured [conf]iguration files that gets your configs to spill their guts
MITSep 12, 2026 · metrics 2.10.0
Go
malandas/andas
Sift real security risk from the noise — a cross-platform CLI that live-validates leaked secrets and reachability-ranks npm/Yarn vulnerabilities, so you fix what's actually exploitable.
MITSep 17, 2026 · metrics 2.10.0
Go
sanks205/getobserver
Finds what's wrong — and shows you the fix. Code, deps, config & infra — one offline scan, one report.
MITSep 18, 2026 · metrics 2.10.0