#secrets

Find, verify, and analyze leaked credentials

A tool for secrets management, encryption as a service, and privileged access management

A community project with additional components and extensions for Aspire

Find and redact sensitive data before it leaks — a fast, offline CLI and Go library that detects PII, secrets, and credentials in files and streams, scores them with context-aware confidence, and redacts them format-preserving. Nothing leaves your host.

CDK Construct that syncs your sops secrets into AWS SecretsManager secrets.

Detect leaked secrets + live validation. Map blast radius across your stack. Revoke fast. Hundreds of rules.