Arnica Secrets Security
- Android app
- Not listed
- Free plan
- Yes
- Paid plans from
- $25/mo
- Runs on
- api, self-hosted, Web
Summary
Arnica Secrets Security detects and validates hardcoded secrets in code repositories, then can automatically mitigate newly pushed validated secrets by rewriting commits and removing them from Git history. It assigns severity using validation context, such as whether credentials belong to a highly privileged or development account. Scans run daily, with revalidation on code changes and scheduled scans. Arnica integrates with GitHub, GitLab, Azure DevOps, and Bitbucket; it can send alerts through Slack and Microsoft Teams and create tickets through Jira or Azure DevOps Boards. Teams can configure regex-based detectors, ignored paths, and policies for scanning and resolution workflows. Arnica says it does not retain source-code snippets containing detected secrets, and that collected customer data is encrypted at rest with tenant separation. Its cloud infrastructure is hosted on AWS, with data encrypted in transit using TLS 1.2 or 1.3 and at rest using AES 256. A free plan is available, with ingestion every seven days; premium plans ingest in real time. Listed annual prices are 0.00 USD per year for Free, 300.00 USD per year for Business, and 600.00 USD per year for Enterprise, each billed per identity per year.
Who it is for
Arnica suits teams seeking secret detection and validation across GitHub, GitLab, Azure DevOps, or Bitbucket. The free plan has weekly ingestion, while Business and Enterprise list real-time scanning and mitigation features.
What is good
- Detects and validates hardcoded secrets.
- Can rewrite commits to remove newly pushed secrets.
- Supports four listed version-control platforms.
- Allows custom regex-based secret detectors.
- Free plan includes secrets scanning and SSO.
What to know first
- Free-plan data ingestion runs every seven days.
- Business and Enterprise are priced per identity per year.
- On-premise deployment is listed as an add-on.
Verdict
Arnica combines secret validation with mitigation workflows and integrations for code hosting, chat, and ticketing. Compare the free plan’s weekly ingestion with premium real-time scanning, and note that listed paid prices are per identity per year.
Arnica Secrets Security plans and pricing
All plansCompared on secrets scanning software
- Free plan
- Yesarnica.io
Facts
- Product
- Arnica detects and validates hardcoded secrets and can automatically mitigate newly pushed validated secrets by rewriting commits and removing them from Git history.arnica.io · 5 Oct 2026
- Validation
- Arnica assigns secret severity using validation context, including whether credentials belong to a highly privileged or development account.arnica.io · 5 Oct 2026
- Scheduled scans
- Arnica scans the codebase daily and revalidates secrets on code changes and scheduled scans.arnica.io · 5 Oct 2026
- Integrations
- The secrets product page lists GitHub, GitLab, Azure DevOps, and Bitbucket integrations, with alerts through Slack and Microsoft Teams and tickets through Jira or Azure DevOps Boards.arnica.io · 5 Oct 2026
- Customization
- Teams can configure custom regex-based secret detectors, ignored paths, and policies for scanning and resolution workflows.arnica.io · 5 Oct 2026
- Data handling
- Arnica says it does not persist source-code snippets containing detected hardcoded secrets, and encrypts collected customer data at rest with tenant separation.docs.arnica.io · 5 Oct 2026
- Compliance
- Arnica states that it is SOC 2 Type 2 compliant and describes annual third-party examination of its controls.arnica.io · 5 Oct 2026
- Encryption and hosting
- Arnica says its cloud infrastructure is hosted on AWS and customer data is encrypted in transit with TLS 1.2 or 1.3 and at rest with AES 256.arnica.io · 5 Oct 2026
- Deployment
- The Enterprise plan includes support for an on-premise instance, and Arnica's pricing comparison marks on-prem deployment as an add-on.arnica.io · 5 Oct 2026
- Free-tier limit
- Arnica says data ingestion runs every seven days on the free plan and runs in real time on premium plans.arnica.io · 5 Oct 2026
- Identity billing
- Arnica defines billable identities as users and other contributing entities with code contributions or pull-request activity in the last 90 days, with duplicates removed across organizations.arnica.io · 5 Oct 2026
- Support
- The Free plan includes customer success, and Enterprise includes support for an on-premise instance.arnica.io · 5 Oct 2026
Best Arnica Secrets Security alternatives
See all 20
Where it ranks on Everything Xiaomi
Is Arnica Secrets Security yours?
Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.
Sources
- arnica.io/use-cases/hard-code-secrets· checked 5 Oct 2026
- docs.arnica.io/arnica-documentation/security/data-hand· checked 5 Oct 2026
- arnica.io/company/security· checked 5 Oct 2026
- arnica.io/pricing· checked 5 Oct 2026