GitGuardian Alternatives
Apps similar to GitGuardian include Gitleaks, which is free and open source. Other options are AWS Lab's git-secrets, truffleHog, Kingfisher and AquilaX. You can choose from more than 10 Vulnerability Scanners like GitGuardian for Mac, Windows, Linux and the web.
Alternatives list
git-secrets scans commits, commit messages, and --no-ff merges to prevent adding secrets into your git repositories. If a commit, commit message, or any commit in a --no-ff merge history matches one of your configured prohibited regular expression patterns, then the commit is...
Cost / License
- Free
- Open Source
Platforms
- Mac
- Windows
- Linux
Searches through git repositories for secrets, digging deep into commit history and branches. This is effective at finding secrets accidentally committed.
Cost / License
- Free
- Open Source (AGPL-3.0)
Platforms
- Mac
- Windows
- Linux
Kingfisher is a high-speed, open-source secret scanner and live validation tool. It scans code, Git history, developer platforms, cloud storage, collaboration tools, and containers, then verifies exposed credentials, maps their blast radius across identities, permissions, and...
Cost / License
- Free
- Open Source (Apache-2.0)
Platforms
- Windows
- Mac
- Linux
United States
+1
K
AquilaX Ultimate is a comprehensive software security scanner, designed to detect a wide range of security vulnerabilities in the source code of any application. Is committed to change how contextual analysis is done to eliminate virtually any false positive.
Cost / License
- Freemium
- Proprietary
Application type
Platforms
- Online
- Software as a Service (SaaS)
United Kingdom
CLI tool that finds secrets accidentally committed to a git repo, eg passwords, private keys - UKHomeOffice/repo-security-scanner
Cost / License
- Free
- Open Source (MIT)
Platforms
- Mac
- Windows
- Linux
ProdCanary is a static security review for apps built with AI tools like Lovable, Bolt and Cursor. Upload a zip of your own project and in seconds it flags the mistakes that cause real breaches: hardcoded API keys, Supabase service_role keys in the frontend, missing Row Level...
Cost / License
- Freemium
- Proprietary
Application type
Platforms
- Online
A single pane of glass for understanding and mitigating risks across your entire codebase and supply chain.
Cost / License
- Freemium
- Proprietary
Application type
Platforms
- Software as a Service (SaaS)
- United Kingdom
Cremit is an all-in-one credential security platform designed for developers and security teams. This service integrates with source code version control systems, collaboration tools, and messaging platforms to effectively detect and manage secret information.
Cost / License
- Freemium
- Proprietary
Platforms
- Software as a Service (SaaS)
- Online
+2
Local secret scanner that catches API keys, passwords, and other credentials in your code before they leak - built for AI-assisted development.
Cost / License
- Freemium
- Open Source (Apache-2.0)
Platforms
- Windows
- Mac
- Linux
- npm
- GitHub Actions
- GitHub Marketplace
Gitrob is a tool to help find potentially sensitive files pushed to public repositories on Github. Gitrob will clone repositories belonging to a user or organization down to a configurable depth and iterate through the commit history and flag files that match signatures for...
Cost / License
- Free
- Open Source
Alerts
- Discontinued
Platforms
- Mac
- Windows
- Linux
detect-secrets is an aptly named module for (surprise, surprise) detecting secrets within a code base.
Cost / License
- Free
- Open Source (Apache-2.0)
Platforms
- Mac
- Windows
- Linux
