Application Security

Secret Scanning Tools: Find Leaked API Keys & Passwords

One leaked API key can expose your whole cloud. Compare secret scanning tools that catch hardcoded credentials in code, Git history, CI logs and Slack, free or paid.

11 vendors14 products

See the Top 11 ranking

Secret Scanning vendors 11

Companies that offer Secret Scanning.

Featured vendors

GitHub logo

GitHub

San Francisco, California, USA

Featured

Looking at GitHub? Its GitHub Advanced Security targets code security and secret protection for developers. Compare features, fit and the top SAST alternatives here.

GitGuardian logo

GitGuardian

Paris, France

Featured

GitGuardian focuses on secrets detection. See GitGuardian Platform, who it is built for, such as developers, and the top Secrets Management alternatives worth comparing.

Your company hereReach buyers browsing Secret ScanningBecome a sponsor

These vendors are highlighted by Cyber Rank. This does not affect our rankings, reviews or the order of the list below.

GitHub logo

GitHub

San Francisco, California, USA

GitLab logo

GitLab

San Francisco, California, USA

Semgrep logo

Semgrep

San Francisco, California, USA

Snyk logo

Snyk

Boston, Massachusetts, USA

Secret Scanning products 14

Open a product to see its features, pricing and reviews, or compare it with others.

Aikido Security logo

Aikido Security

Aikido Security is an all-in-one developer-first application security platform for developer application security. See features and Application Security alternatives.

Application SecurityView details
GitGuardian logo

GitGuardian Platform

What does GitGuardian Platform do? It covers unified code security. See typical use cases, cloud or self-hosted deployment and how it compares to rivals.

Application SecurityView details
GitHub logo

GitHub Secret Protection

What does GitHub Secret Protection do? It covers bypass auditing. See typical use cases, cloud or on-premises deployment and how it compares to rivals.

Application SecurityView details
GitHub logo

GitHub Secret Scanning

Looking for Secret Scanning software? GitHub Secret Scanning by GitHub provides API alert triage for secret leakage discovery. Compare features and alternatives.

Application SecurityView details
GitLab logo

GitLab Secret Detection

GitLab Secret Detection: automated secret scanning, gitleaks engine and 100+ secret pattern rules. Built for Software Supply Chain. Compare Secret Scanning alternatives.

Application SecurityView details
Gitleaks logo

Gitleaks

Gitleaks: High-speed Go scanning engine and 150+ secret signature rules. Built for git repository secret scanning. Compare Application Security alternatives.

Application SecurityView details
Semgrep logo

Semgrep Secrets

Evaluating Semgrep Secrets? See how this Secret Scanning tool handles PR blocking and semantic secret scanning, where it fits best and which alternatives to compare.

Application SecurityView details
Snyk logo

Snyk

Snyk helps teams with Container Security. Explore features like developer-first AppSec suite and automated PR fixes, cloud deployment and the closest SAST competitors.

Application SecurityView details
Check Point logo

SpectralOps

SpectralOps from Check Point focuses on hardcoded credential detection. Key capabilities: Pre-commit Git hooks. Compare it with the leading Secret Scanning alternatives.

Application SecurityView details
Truffle Security logo

TruffleHog

What does TruffleHog do? It covers active credential verification and 800+ secret detectors. See typical use cases, cloud deployment and how it compares to rivals.

Application SecurityView details

Tell us your company and website, and we'll send the slots and details.

By sending this you agree to our Privacy Policy and Terms.