Secret Scanning Python Packages

kingfisher-bin

Detect secrets + live validation. Map blast radius. Revoke fast. Use the CLI or embed in Rust and Python.

redact-secret

Detect and redact secrets before they reach logs, storage, or LLM context. Deterministic Rust core for JavaScript, Python, Rust, and WebAssembly.

maunprekshak

The Silent Observer — Fast, local-first security scanner for dependencies (SCA), exposed secrets & git history, SAST, Dockerfiles, and GitHub Actions with multi-provider AI remediation.

websec-validator

Local-first security recon for AI coding agents: map attack surfaces, stage tailored probes, and produce a fact-grounded brief. Part of the Guard family with DocGuard and TestGuard.

evnx

A comprehensive CLI tool for managing .env files — validation, secret scanning, and format conversion.

kingfisher-secret-scanner

Detect secrets + live validation. Map blast radius. Revoke fast. Use the CLI or embed in Rust and Python.

lambda-watcher

Turn a folder of downloaded AWS Lambda zips into a versioned, diffable history — readable diffs of code, dependencies, env vars, IAM impact and secrets. Runs locally, makes no AWS API calls.

traceredact

Redact PII & secrets from LLM prompts, agent traces & tool-call args before they hit your logs. Content-based detection (not just key names), CI-gateable, zero data retained.

repodx

Check your AI-built project for leaked secrets, open Supabase/Firebase rules and junk before you push.

garita

Impide que datos personales y credenciales entren a tu repositorio: nombres de tu propio padrón, CURP, RFC, CLABE, NSS y secretos. Hook de pre-commit + GitHub Action. Sin dependencias.

secret-scanner-cl

Escáner de secretos para Python con CLI, pre-commit, MCP y extensión para VS Code.

patronus-api-client

Security scanner and runtime protection for AI coding agents. Detects prompt injection, secrets, PII, and unsafe tool activity across Codex, Claude Code, and DeepSeek Harness.

agentsweep

Find and redact secrets in AI coding agent histories (Claude Code, and more).

sharelint

Local privacy preflight for files, folders, and archives—catch secrets, PII, metadata, and hidden document content before sharing.

dotenv-sentinel

Keep your .env files honest: validate .env against .env.example, catch missing or malformed config, and keep secrets out of git

gateshield

Policy-driven security orchestration for hardened CI/CD pipelines

shareclean

Local-first Python CLI for safer log sharing: redact secrets, tokens, emails, and local paths before posting to GitHub issues, tickets, or AI chats.

gitlab-harvester

Global term search for GitLab via gitlab-python

gitsafety

Stops you from committing an API key — git repos, loose folders and Jupyter notebooks

crossfire-rules

Regex rule overlap analyzer for DLP, secret scanning, SAST, and IDS tools

aysal-scan

Scan git repos for leaked secrets and find out if they're still active and what they can access — not just detection, but real blast radius.

rsscan

Block commits that introduce API keys, tokens and other machine credentials. Runs entirely locally.

apkscan

Scan for secrets, endpoints, and other sensitive data after decompiling and deobfuscating Android files. (.apk, .xapk, .dex, .jar, .class, .smali, .zip, .aar, .arsc, .aab, .jadx.kts).

repo-sentinel-lite

Deterministic Python CLI for repository hygiene checks and pre-commit secret scanning.