Looking at GitHub? Its GitHub Advanced Security targets code security and secret protection for developers. Compare features, fit and the top SAST alternatives here.
Application Security
Secret Scanning Tools: Find Leaked API Keys & Passwords
One leaked API key can expose your whole cloud. Compare secret scanning tools that catch hardcoded credentials in code, Git history, CI logs and Slack, free or paid.
11 vendors14 products
See the Top 11 rankingSecret Scanning vendors 11
Companies that offer Secret Scanning.
Featured vendors
GitGuardian focuses on secrets detection. See GitGuardian Platform, who it is built for, such as developers, and the top Secrets Management alternatives worth comparing.
These vendors are highlighted by Cyber Rank. This does not affect our rankings, reviews or the order of the list below.
Aikido Security
San Francisco, California, USA
Check Point
Tel Aviv, Israel
Cycode
Tel Aviv, Israel
GitGuardian
Paris, France
GitHub
San Francisco, California, USA
GitLab
San Francisco, California, USA
Gitleaks
Open Source Project
Infisical
Toronto, Ontario, Canada
Semgrep
San Francisco, California, USA
Snyk
Boston, Massachusetts, USA
Truffle Security
United States
Secret Scanning products 14
Open a product to see its features, pricing and reviews, or compare it with others.
Aikido Security
Aikido Security is an all-in-one developer-first application security platform for developer application security. See features and Application Security alternatives.
Cycode Application Security Platform
Cycode Application Security Platform is a complete application security posture management suite for ASPM. See features and Application Security alternatives.
GitGuardian Internal Monitoring
Looking for Application Security software? GitGuardian Internal Monitoring by GitGuardian provides custom detectors for Code Auditing. Compare features and alternatives.
GitGuardian Platform
What does GitGuardian Platform do? It covers unified code security. See typical use cases, cloud or self-hosted deployment and how it compares to rivals.
GitGuardian Public Monitoring
Looking for Secrets Management software? GitGuardian Public Monitoring by GitGuardian provides rapid alerts for Secrets Security. Compare features and alternatives.
GitHub Secret Protection
What does GitHub Secret Protection do? It covers bypass auditing. See typical use cases, cloud or on-premises deployment and how it compares to rivals.
GitHub Secret Scanning
Looking for Secret Scanning software? GitHub Secret Scanning by GitHub provides API alert triage for secret leakage discovery. Compare features and alternatives.
GitLab Secret Detection
GitLab Secret Detection: automated secret scanning, gitleaks engine and 100+ secret pattern rules. Built for Software Supply Chain. Compare Secret Scanning alternatives.
Gitleaks
Gitleaks: High-speed Go scanning engine and 150+ secret signature rules. Built for git repository secret scanning. Compare Application Security alternatives.
Infisical Secret Scanning
Infisical Secret Scanning is a software supply chain secret scanning tool for preventing leaked secrets. See features and Secret Scanning alternatives.
Semgrep Secrets
Evaluating Semgrep Secrets? See how this Secret Scanning tool handles PR blocking and semantic secret scanning, where it fits best and which alternatives to compare.
Snyk
Snyk helps teams with Container Security. Explore features like developer-first AppSec suite and automated PR fixes, cloud deployment and the closest SAST competitors.
SpectralOps
SpectralOps from Check Point focuses on hardcoded credential detection. Key capabilities: Pre-commit Git hooks. Compare it with the leading Secret Scanning alternatives.
TruffleHog
What does TruffleHog do? It covers active credential verification and 800+ secret detectors. See typical use cases, cloud deployment and how it compares to rivals.