AppSecNews

Secret Scanning

Secret Scanning

Find credentials, tokens and keys committed to code or exposed in build systems.

9 tools profiled

How it differs Finds credentials committed to code, git history and build artifacts. Vulnerable dependencies are SCA, not this.

License
Subcategory
Deployment
Integrations
Maturity
Signals
Clear

1 tool match

Active Credential Verification Clear all

  • TruffleHog

    Truffle Security

    Secret Scanning

    Secret scanner that calls each provider's API to confirm whether a discovered credential is active, across git history, cloud storage, container images and chat and ticketing systems.

    Open source and commercial
    Established

  • TruffleHog

    Truffle Security

    Secret scanner that calls each provider's API to confirm whether a discovered credential is active, across git history, cloud storage, container images and chat and ticketing systems.

    Open source and commercial Established
    Secret Scanning
Tick up to 4 tools above.