Security scanner for AI-generated code — finds hardcoded secrets, missing auth, data leaks, insecure configs

A powerful and AI-driven CLI tool that automatically scans source code for hardcoded secrets before Git operations and deployments, helping developers prevent sensitive data leaks

Security scanning engine for Model Context Protocol (MCP) servers. Detects hardcoded secrets, command injection, SSRF, auth misconfig, and compliance gaps.

Static analysis CLI for C# codebases. Detects AI-generated code, hardcoded secrets, and quality issues.

Lint .env files locally: sync against .env.example, validate syntax, detect hardcoded secrets (AWS, Stripe, GitHub, OpenAI, private keys…), and enforce an optional schema. Deterministic CLI, JSON/Markdown reports, no network — your secrets never leave the

Build-time security scanner for Vite projects - detect hardcoded secrets, RSC leaks, and dangerous patterns

Standalone content scanning library for detecting hardcoded secrets, sensitive data patterns, and private keys in text content.

Free + offline post-quantum and weak-crypto scanner. Finds RSA / ECDSA / ECDH, hardcoded secrets, SHA-1 / MD5, TLS misconfig. Outputs a PDF + CycloneDX CBOM. No signup, no telemetry, Apache 2.0.

An eslint rule that searches for potential secrets/keys in code

Security auditor for AI agent configurations. Scans Claude Code setups for vulnerabilities, misconfigs, and injection risks.

Detect hardcoded secrets and credentials in code and config files

Local, zero-setup security linter for your MCP client configs. Catches command injection, hardcoded secrets, insecure transports, and known CVEs across Cursor, Claude, Windsurf, VSCode, Continue, Codex, and Zed. No account, no API calls, no data leaves yo

LockZero language server — diagnostics and code actions for hardcoded secrets

Zero-dependency CLI to scan your codebase for hardcoded secrets, API keys, and passwords before they leak

OCI NodeJS client for Secrets Service

Keeper Secrets Manager Javascript SDK

Credential management facilities for Imperative, Zowe CLI, and extenders.

Secrets Manager middleware for the middy framework

React hooks and UI for reading and managing secrets in a Sanity Studio. This is a good pattern for keeping configuration secret. Instead of using environment variables which would be bundled with the Studio source (it is an SPA), we store secret informati

CDK Constructs that syncs your sops secrets into AWS SecretsManager secrets.