Secret Detection Python Packages

redact-secret

Detect and redact secrets before they reach logs, storage, or LLM context. Deterministic Rust core for JavaScript, Python, Rust, and WebAssembly.

secretshield

A security utility for detecting and redacting likely secrets at runtime, in source files, Git commits, and CI.

pygarble

Local Python text screening: PII, secrets, profanity, gibberish and redaction. No LLM calls; zero-dependency base with optional local backends.

argus-security

Argus brings “a hundred eyes” to your project, combining leading open source security tools into a scalable, automated, continuous security pipeline.

vamp-secrets-scanner

Static secrets scanner — 271 patterns across 9 YAML rule files (cloud, AI APIs, CI/CD, SaaS, hardware, web3), git history, Docker, K8s, SARIF, --delta

actualis

What actually ran. Reads existing coding-agent logs and turns them into clear answers about exposure, activity, and cost. Local, read-only, no dependencies.

prodpilot

A Layered MCP-Based System for Automated Production Readiness and Deployment of Vibe-Coded Projects

wintersolve

Offline-first repository intelligence: understand, debug, document, and review any codebase from the terminal.

spillage

Keep API keys out of your coding agents: hooks that block the leak in Claude Code, Codex and Gemini CLI, a scan for what already leaked in the logs of 14 agents, and a scrub.

open-sorcerer

Detect prompt injection, prompt leakage, PII, and secrets before they reach LLMs and downstream services.

publish-guard

Find what you forgot to remove before publishing a repository — including the parts that are only in the history

keyleak-detector

Runtime leak detector for modern web apps — finds exposed API keys, validates BaaS misconfigurations (Supabase/Firebase RLS), and catches secrets in JS bundles. Chrome extension + CLI.

alnur

ALNUR — Open-source end-to-end security vulnerability scanner. Detects CVEs, hardcoded secrets, architecture flaws, and port risks across Node.js, Python, PHP, Go, Rust, Java, .NET, Ruby and more

privacy-mask

Automatically redacts sensitive data in screenshots before sending to AI agents

webexpose-scanner

🔍 Passive web exposure scanner — finds publicly exposed files, backups, configs, secrets, and sensitive documents on websites you own. Python CLI with Markdown/JSON reports.

dotenv-secrets-scanner

Lightweight, DevSecOps-friendly secret scanner with SARIF & Pre-commit support. Detects API keys, tokens, and passwords with entropy analysis.

leakproof

Local secret firewall for AI coding assistants (Claude Code/Cursor/aider) — scans + redacts secrets before anything leaves the machine. Local-first, zero cloud. MIT.

vibescan-ai

VibeScan detects security vulnerabilities specifically introduced by AI coding tools (Cursor, Claude, GitHub Copilot) — patterns that traditional tools like GitLeaks and TruffleHog miss.