Secret scanning

Find leaked API keys, tokens and passwords in code, Git history, CI logs and container images.

6 tools compared

Compare side by side

Gitleaks

gitleaks/gitleaks

Popular

Fast regex- and entropy-based scanner for secrets in Git repos, files and pre-commit hooks.

30.9k2w ago

TruffleHog

trufflesecurity/trufflehog

Popular

Finds and verifies leaked credentials across Git, S3, Docker, Slack and more with 800+ detectors.

29k6d ago

GitHub Secret Protection

docs.github.com

Popular

GitHub's secret scanning and push protection that blocks known token formats before they reach a repo.

service

detect-secrets

Yelp/detect-secrets

Yelp's baseline-driven secret scanner designed to stop new secrets from entering a codebase.

4.7k2.6M/wk7mo ago+35%

ggshield

GitGuardian/ggshield

GitGuardian's CLI and pre-commit hook that scans code and history against 500+ secret detectors.

2k55.9k/wk1d ago+32%

Kingfisher

mongodb/kingfisher

New

MongoDB's high-performance Rust secret scanner with live credential validation.

1.3k2d ago

Download trends

Weekly downloads for the 2 most-downloaded tools in this category. Hover for exact values, or switch to log scale to compare tools of very different sizes.

detect-secrets
ggshield

Comparison

Click a column to sort. “#” is the curated ranking, with the most widely used first.


1	GitleaksPopular Fast regex- and entropy-based scanner for secrets in Git repos, files and pre-commit hooks.	30.9k	n/a	n/a	2w ago	82
2	TruffleHogPopular Finds and verifies leaked credentials across Git, S3, Docker, Slack and more with 800+ detectors.	29k	n/a	n/a	6d ago	81
3	GitHub Secret ProtectionPopular GitHub's secret scanning and push protection that blocks known token formats before they reach a repo.	No public repository or package of its own to measure
4	detect-secrets Yelp's baseline-driven secret scanner designed to stop new secrets from entering a codebase.	4.7k	2.6M	+35%	7mo ago	73
5	ggshield GitGuardian's CLI and pre-commit hook that scans code and history against 500+ secret detectors.	2k	55.9k	+32%	1d ago	59
6	KingfisherNew MongoDB's high-performance Rust secret scanner with live credential validation.	1.3k	n/a	n/a	2d ago	57

Secret scanning

Find leaked API keys, tokens and passwords in code, Git history, CI logs and container images.

6 tools compared

Compare side by side

Gitleaks

gitleaks/gitleaks

Popular

Fast regex- and entropy-based scanner for secrets in Git repos, files and pre-commit hooks.

30.9k2w ago

TruffleHog

trufflesecurity/trufflehog

Popular

Finds and verifies leaked credentials across Git, S3, Docker, Slack and more with 800+ detectors.

29k6d ago

GitHub Secret Protection

docs.github.com

Popular

GitHub's secret scanning and push protection that blocks known token formats before they reach a repo.

service

detect-secrets

Yelp/detect-secrets

Yelp's baseline-driven secret scanner designed to stop new secrets from entering a codebase.

4.7k2.6M/wk7mo ago+35%

ggshield

GitGuardian/ggshield

GitGuardian's CLI and pre-commit hook that scans code and history against 500+ secret detectors.

2k55.9k/wk1d ago+32%

Kingfisher

mongodb/kingfisher

New

MongoDB's high-performance Rust secret scanner with live credential validation.

1.3k2d ago

Download trends

Weekly downloads for the 2 most-downloaded tools in this category. Hover for exact values, or switch to log scale to compare tools of very different sizes.

detect-secrets
ggshield

Comparison

Click a column to sort. “#” is the curated ranking, with the most widely used first.


1	GitleaksPopular Fast regex- and entropy-based scanner for secrets in Git repos, files and pre-commit hooks.	30.9k	n/a	n/a	2w ago	82
2	TruffleHogPopular Finds and verifies leaked credentials across Git, S3, Docker, Slack and more with 800+ detectors.	29k	n/a	n/a	6d ago	81
3	GitHub Secret ProtectionPopular GitHub's secret scanning and push protection that blocks known token formats before they reach a repo.	No public repository or package of its own to measure
4	detect-secrets Yelp's baseline-driven secret scanner designed to stop new secrets from entering a codebase.	4.7k	2.6M	+35%	7mo ago	73
5	ggshield GitGuardian's CLI and pre-commit hook that scans code and history against 500+ secret detectors.	2k	55.9k	+32%	1d ago	59
6	KingfisherNew MongoDB's high-performance Rust secret scanner with live credential validation.	1.3k	n/a	n/a	2d ago	57

Search TechInTrends

Secret scanning

Gitleaks

TruffleHog

GitHub Secret Protection

detect-secrets

ggshield

Kingfisher

Download trends

Comparison

Secret scanning

Gitleaks

TruffleHog

GitHub Secret Protection

detect-secrets

ggshield

Kingfisher

Download trends

Comparison