DeepSource is an AI code review platform for teams writing code with AI.
Alternatives to git-secrets
Endor Labs is an application security platform for code, dependencies, secrets, container images, and AI coding agents.
Vooda AI is a secrets detection and security intelligence platform that finds exposed credentials, API keys, and sensitive data across a technology stack.
- 4

Arnica Secrets Security
Arnica Secrets Security detects and validates hardcoded secrets in code repositories, then can automatically mitigate newly pushed validated secrets…
Free planWebAPISelf-hosted6.6From $300 a year - 5

GitGuardian
GitGuardian helps organizations detect exposed secrets and manage non-human identities and AI-agent security.
Free planWebAPILinuxmacOS6.6Free plan - 6
detect-secrets
detect-secrets is an open-source Python tool for finding potential secrets in a codebase and helping prevent new ones from being committed.
Free planLinuxmacOSSelf-hostedWindows6.5Free plan - 7
ByteHide Secrets
ByteHide Secrets combines secret detection with tools for storing and managing sensitive values.
Free planWebAPILinuxmacOS6.3Free plan - 8

ggshield
ggshield is GitGuardian's command-line application for finding and preventing hardcoded secrets before code is pushed.
Free planAPILinuxmacOSSelf-hosted6.3Free plan - 9

Talisman
Talisman is a Git security tool that installs hooks to check outgoing changes for potential secrets before they leave a developer’s workstation.
Free planLinuxmacOSWindows6.3Free plan - 10
Kingfisher
Kingfisher is a free, Apache-2.0-licensed tool for detecting leaked secrets and helping teams assess and contain them.
Free planLinuxmacOSSelf-hostedWindows6.2Free plan - 11
TruffleHog
Free planLinuxmacOSSelf-hostedWindows6.2Free plan - 12
KeyHog
KeyHog is a free, open-source Rust tool for finding exposed secrets in code and other systems.
Free planLinuxmacOSSelf-hostedWindows6.1Free plan - 13
Git Secret Scanner
Git Secret Scanner is a free tool for locating hardcoded credentials in GitHub organizations and local filesystems.
Free planLinuxmacOSSelf-hostedWindows6.0Free plan - 14

Gitleaks
Gitleaks is free, MIT-licensed software for detecting passwords, API keys, tokens, and other secrets in Git repositories, files, and data streamed through stdin.
Free planLinuxmacOSSelf-hostedWindows6.0Free plan - 15
Secretlint
Secretlint is a free, open-source linting tool that scans projects for credentials to help prevent them from being committed to Git.
Free planExtensionLinuxmacOSWindows6.0Free plan - 16
Deepfence SecretScanner
Deepfence SecretScanner is a free, open-source Linux and self-hosted tool for locating unprotected secrets in container images and file systems.
Free planLinuxSelf-hosted5.9Free plan - 17

Legit Security Secret Scanning
Legit Security Secret Scanning is a paid security platform available as SaaS, private cloud, on-premise, self-hosted, web, and API deployments.
WebAPISelf-hosted5.9 - 18
scan4secrets
scan4secrets is a free, MIT-licensed command-line tool for scanning source trees, running web apps, and CI logs for exposed credentials, code…
Free planLinuxWindows5.9Free plan - 19

Betterleaks
Betterleaks is a free, MIT-licensed tool for scanning for exposed secrets such as API keys and credentials.
APILinuxmacOSSelf-hosted5.8 - 205.3From $15 a month
- 21
HashiCorp Vault
LinuxmacOSWindows5.1 - 224.7
- 23
Titus
LinuxmacOSWindows4.7


