Tools
trufflehog
trufflesecurity/trufflehog
A secrets scanning tool that discovers, classifies, and verifies leaked credentials across Git repositories, filesystems, chats, and cloud storage.
Topics
Related projects
kingfisher1.3kKingfisher is a fast secret scanner and credential response tool that detects leaked secrets, validates live credentials, maps blast radius, and supports revocation.
gitleaks31kA fast CLI scanner that finds passwords, API keys, and tokens leaked in git repos, files, and CI pipelines.
git-hound1.5kGitHound is a command-line GitHub reconnaissance tool that combines dorks, regex matching and entropy checks to hunt for exposed API keys and credentials across public repositories, Gists and commit history.
infisical30.4kAn open-source security infrastructure platform for managing secrets, certificates, privileged access, and credentials used by AI agents.
ContainerSSH3.1kContainerSSH is an SSH server that launches a fresh container for each login, with pluggable authentication and configuration webhooks, Docker/Kubernetes backends and audit logging for labs, debugging access and honeypots.
bearer2.8kBearer is a static application security testing (SAST) CLI that scans source code and data flows to find and prioritize security and privacy risks. Developers run it locally or in CI pipelines.