Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.

🔪 Scan memory for secrets and more. Maybe eventually a full /proc toolkit.

Protect your secrets using Gitleaks-Action

High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.

Scan for secrets, endpoints, and other sensitive data after decompiling and deobfuscating Android files. (.apk, .xapk, .dex, .jar, .class, .smali, .zip, .aar, .arsc, .aab, .jadx.kts).

Open-source secret scanner in Rust

command-line tool designed to rapidly scan decompiled Android applications for hardcoded secrets. It moves beyond simple keyword searching by using a powerful regex engine to identify high-entropy strings, specific key patterns, and other sensitive data that could pose a security risk.

Regex based secret scanner for sccm deployment points sccmcontentlib$ shares. Find secrets automatically and download entire packages for deeper analysis.

A secrets scanner for Confluence - For red teamers and pentesters

fully autonomous credential intelligence platform that discovers, │ │ extracts, correlates, verifies, and reports exposed secrets across your │ │ target's entire attack surface.

A sarcastic list of secret scanners

Crenox - Ultra-fast, zero-dependency Git pre-commit hook and credentials scanner written in Go

KeyWatch – the vigilant guardian that sniffs out hidden keys and secrets in your code with a wink and a nod.

GitHub Secrets Scanner Action

An air-gapped DevSecOps VS Code extension that detects leaked secrets, API keys, and custom passwords in real-time using concurrent Go routines and Shannon Entropy. Zero telemetry.

High-speed Git history forensic scanner. Detects and locates leaked API keys, Stripe secrets, and credentials buried deep within repository commit patches.

Zero false positive secret scanner

Fast, zero-dependency secret scanner for Java projects

Local-first LLM secret scanner — scan ChatGPT, Claude & Cursor chat history for leaked API keys, PII & credentials. HTML dashboard + rotation guides.

CLI tool to transform verbose noseyparker JSON reports into concise JSON or CSV summaries for security analysis