Arnica Secrets Security
Arnica Secrets Security detects and validates hardcoded secrets in code repositories, then can automatically mitigate newly pushed validated secrets by rewri…
What Arnica Secrets Security is
Arnica Secrets Security detects and validates hardcoded secrets in code repositories, then can automatically mitigate newly pushed validated secrets by rewriting commits and removing them from Git history. It assigns severity using validation context, such as whether credentials belong to a highly privileged or development account. Scans run daily, with revalidation on code changes and scheduled scans. Arnica integrates with GitHub, GitLab, Azure DevOps, and Bitbucket; it can send alerts through Slack and Microsoft Teams and create tickets through Jira or Azure DevOps Boards. Teams can configure regex-based detectors, ignored paths, and policies for scanning and resolution workflows. Arnica says it does not retain source-code snippets containing detected secrets, and that collected customer data is encrypted at rest with tenant separation. Its cloud infrastructure is hosted on AWS, with data encrypted in transit using TLS 1.2 or 1.3 and at rest using AES 256. A free plan is available, with ingestion every seven days; premium plans ingest in real time. Listed annual prices are free for Free, $300 a year for Business, and $600 a year for Enterprise, each billed per identity per year.
Good
- Detects and validates hardcoded secrets.
- Can rewrite commits to remove newly pushed secrets.
- Supports four listed version-control platforms.
- Allows custom regex-based secret detectors.
- Free plan includes secrets scanning and SSO.
Watch out
- Free-plan data ingestion runs every seven days.
- Business and Enterprise are priced per identity per year.
- On-premise deployment is listed as an add-on.
Who it suits
Arnica suits teams seeking secret detection and validation across GitHub, GitLab, Azure DevOps, or Bitbucket. The free plan has weekly ingestion, while Business and Enterprise list real-time scanning and mitigation features.
Verdict
Arnica combines secret validation with mitigation workflows and integrations for code hosting, chat, and ticketing. Compare the free plan’s weekly ingestion with premium real-time scanning, and note that listed paid prices are per identity per year.
Plans and prices
From Arnica Secrets Security's own pricing page, checked 5 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Free | Free | Weekly automated reports · SAST, SCA, IaC, licensing, and reputation scans · Secrets scanning · SSO · Customer success · Per Identity / Year |
| Business | $300 a year | 30 AI credits per identity · Real-time scanning · Slack and Microsoft Teams ChatOps · Zero new secret policy enforcement · Real-time secrets mitigation · Per Identity / Year |
| Enterprise | $600 a year | 100 AI credits per identity · Custom code risk and secret rules · Arnica API · On-premise instance support · Jira integration · Per Identity / Year |
The facts
Each one read from Arnica Secrets Security's own pages, with the date it was checked.
What it does
- Compliance
- Arnica states that it is SOC 2 Type 2 compliant and describes annual third-party examination of its controls.checked 5 Oct 2026
- Customization
- Teams can configure custom regex-based secret detectors, ignored paths, and policies for scanning and resolution workflows.checked 5 Oct 2026
- Data handling
- Arnica says it does not persist source-code snippets containing detected hardcoded secrets, and encrypts collected customer data at rest with tenant separation.checked 5 Oct 2026
- Deployment
- The Enterprise plan includes support for an on-premise instance, and Arnica's pricing comparison marks on-prem deployment as an add-on.checked 5 Oct 2026
- Encryption and hosting
- Arnica says its cloud infrastructure is hosted on AWS and customer data is encrypted in transit with TLS 1.2 or 1.3 and at rest with AES 256.checked 5 Oct 2026
- Integrations
- The secrets product page lists GitHub, GitLab, Azure DevOps, and Bitbucket integrations, with alerts through Slack and Microsoft Teams and tickets through Jira or Azure DevOps Boards.checked 5 Oct 2026
- Product
- Arnica detects and validates hardcoded secrets and can automatically mitigate newly pushed validated secrets by rewriting commits and removing them from Git history.checked 5 Oct 2026
- Scheduled scans
- Arnica scans the codebase daily and revalidates secrets on code changes and scheduled scans.checked 5 Oct 2026
- Support
- The Free plan includes customer success, and Enterprise includes support for an on-premise instance.checked 5 Oct 2026
- Validation
- Arnica assigns secret severity using validation context, including whether credentials belong to a highly privileged or development account.checked 5 Oct 2026
Money
- Free-tier limit
- Arnica says data ingestion runs every seven days on the free plan and runs in real time on premium plans.checked 5 Oct 2026
- Identity billing
- Arnica defines billable identities as users and other contributing entities with code contributions or pull-request activity in the last 90 days, with duplicates removed across organizations.checked 5 Oct 2026
Alternatives to Arnica Secrets Security
- 1
DeepSource
Free planWebAPILinuxmacOS8.0From $30 a month - 2
Endor Labs
Free planWebAPIExtensionLinux7.4Free plan - 3
Vooda AI
Free planWebAPILinuxmacOS6.9Free plan - 4
GitGuardian
Free planWebAPILinuxmacOS6.6Free plan - 5
detect-secrets
Free planLinuxmacOSSelf-hostedWindows6.5Free plan - 6
ByteHide Secrets
Free planWebAPILinuxmacOS6.3Free plan