🔍 Gitsint is a cutting-edge OSINT platform designed for security researchers, threat intelligence teams, and developers. Uncover hidden connections, detect exposed secrets, and map digital footprints across GitHub's vast ecosystem.

A blazingly fast secrets scanner with validation capabilities

Some useful functionality to detect secrets

Security Command Center for Model Context Protocol (MCP) servers. Detect prompt injection, tool poisoning, secrets, and vulnerabilities. The Trivy of MCP security.

Security and cleanup toolkit for Claude Code. Auto secret detection, 99.4% config reduction. CLI & MCP Server.

CLI security scanner for detecting secrets and vulnerabilities in codebases

Git secrets, vulnurabilities scanner with rich reporting

Advanced secret detection and remediation system - 79 API patterns, 8 verification methods

Fast Python static analysis powered by Rust. Detects dead code, security issues (including taint analysis), and code quality metrics like complexity, Halstead, maintainability, and nesting depth.

Safe-Paste is a developer-focused tool that ensures you never leak sensitive information when sharing code. It scans your pasted content for secrets, tokens, credentials, and confidential values, then redacts or replaces them with safe placeholders. Ideal for AI prompts, documentation, issue reports, and public chats.

MLSecOps pipeline tool for automated security scanning, policy enforcement, and compliance reporting

Advanced Client-Side Static Analysis Tool (SAST) with Shannon Entropy & Heuristic Logic.

A powerful and lightweight tool for bug bounty hunters and security researchers to identify hardcoded secrets, API keys, tokens, credentials, and other sensitive data in code repositories, web applications, and configuration files.

Multi-purpose security scanner for source code, container images. Supports OSV.dev + EPSS scoring.

A reusable GitLab CI/CD template for automated security scanning, including secrets detection (Gitleaks, Trufflehog), dependency vulnerabilities (Trivy), SAST (Semgrep, SonarQube), DAST (OWASP ZAP), and a consolidated security dashboard. Include this in your gitlab-ci.yml for DevSecOps.

Git secret scanner and protection tool - prevent API keys, passwords, and credentials from being committed (Dual Licensed: GPL v3 / Commercial)

A Python-based security auditing tool that detects insecure credential handling, hardcoded secrets, and credential reuse on local systems, focusing on risk identification and mitigation without exploitation.

🛡️ Secure your Linux servers with emergency tools to detect and eliminate malware, crypto miners, and backdoors, ensuring robust protection against attacks.

🔐 Browser-based secret scanner that runs 100% locally. Detect hardcoded API keys, tokens, and credentials without sending data anywhere.