DeepSource is an AI code review platform for teams writing code with AI.
Alternatives to detect-secrets
Endor Labs is an application security platform for code, dependencies, secrets, container images, and AI coding agents.
Vooda AI is a secrets detection and security intelligence platform that finds exposed credentials, API keys, and sensitive data across a technology stack.
- 4

Arnica Secrets Security
Arnica Secrets Security detects and validates hardcoded secrets in code repositories, then can automatically mitigate newly pushed validated secrets…
Free planWebAPISelf-hosted6.6From $300 a year - 5

GitGuardian
GitGuardian helps organizations detect exposed secrets and manage non-human identities and AI-agent security.
Free planWebAPILinuxmacOS6.6Free plan - 6
ByteHide Secrets
ByteHide Secrets combines secret detection with tools for storing and managing sensitive values.
Free planWebAPILinuxmacOS6.3Free plan - 7

ggshield
ggshield is GitGuardian's command-line application for finding and preventing hardcoded secrets before code is pushed.
Free planAPILinuxmacOSSelf-hosted6.3Free plan - 8

Talisman
Talisman is a Git security tool that installs hooks to check outgoing changes for potential secrets before they leave a developer’s workstation.
Free planLinuxmacOSWindows6.3Free plan - 9
Kingfisher
Kingfisher is a free, Apache-2.0-licensed tool for detecting leaked secrets and helping teams assess and contain them.
Free planLinuxmacOSSelf-hostedWindows6.2Free plan - 10
TruffleHog
Free planLinuxmacOSSelf-hostedWindows6.2Free plan - 11
KeyHog
KeyHog is a free, open-source Rust tool for finding exposed secrets in code and other systems.
Free planLinuxmacOSSelf-hostedWindows6.1Free plan - 12
Git Secret Scanner
Git Secret Scanner is a free tool for locating hardcoded credentials in GitHub organizations and local filesystems.
Free planLinuxmacOSSelf-hostedWindows6.0Free plan - 13

Gitleaks
Gitleaks is free, MIT-licensed software for detecting passwords, API keys, tokens, and other secrets in Git repositories, files, and data streamed through stdin.
Free planLinuxmacOSSelf-hostedWindows6.0Free plan - 14
Secretlint
Secretlint is a free, open-source linting tool that scans projects for credentials to help prevent them from being committed to Git.
Free planExtensionLinuxmacOSWindows6.0Free plan - 15
Deepfence SecretScanner
Deepfence SecretScanner is a free, open-source Linux and self-hosted tool for locating unprotected secrets in container images and file systems.
Free planLinuxSelf-hosted5.9Free plan - 16

Legit Security Secret Scanning
Legit Security Secret Scanning is a paid security platform available as SaaS, private cloud, on-premise, self-hosted, web, and API deployments.
WebAPISelf-hosted5.9 - 17
scan4secrets
scan4secrets is a free, MIT-licensed command-line tool for scanning source trees, running web apps, and CI logs for exposed credentials, code…
Free planLinuxWindows5.9Free plan - 18

Betterleaks
Betterleaks is a free, MIT-licensed tool for scanning for exposed secrets such as API keys and credentials.
APILinuxmacOSSelf-hosted5.8 - 195.3From $15 a month
- 20
HashiCorp Vault
LinuxmacOSWindows5.1 - 21
git-secrets
LinuxmacOSWindows4.7 - 224.7
- 23
Titus
LinuxmacOSWindows4.7


