Secret Scanning Tools
Compare the best secret scanning tools to detect hardcoded credentials, API keys, and sensitive data in your codebase and repositories.
Trufflehog is the best open source secrets scanner available, and easily integrates as a GitHub action.
Arnica is a holistic application security solution that focuses primarily on providing a strong developer experience. They have robust policy and attribution engines to build detail oriented workflows getting the right finding to the right person at the right time.
GitGuardian is the best paid provider for this tool and is a great solution for deploying secret detection at scale. On the one hand, secret scanning is a very narrow function, but on the other, a leak is extremely costly. While Arnica does the workflow, GitGuardian has more robust detection.
Cremit does all of the expected secret scanning, but has great real time alerting on what api keys have done and if they're active by pulling their command history when available.