Secrets Detection Python Packages

pygitguardian

Python API client library for the GitGuardian API

ggshield

Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.

hol-guard

Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.

plugin-scanner

Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.

redact-secret

Detect and redact secrets before they reach logs, storage, or LLM context. Deterministic Rust core for JavaScript, Python, Rust, and WebAssembly.

ferret-scan

Find and redact sensitive data before it leaks — a fast, offline CLI and Go library that detects PII, secrets, and credentials in files and streams, scores them with context-aware confidence, and redacts them format-preserving. Nothing leaves your host.

whispers

Identify hardcoded secrets in static structured text (version 2)

aletheore

Evidence-grounded repository audit CLI - deterministic scanner, MCP server, live dashboard, and a GitHub Action that posts PR diffs.

tartufo

Searches through git repositories for high entropy strings and secrets, digging deep into commit history

valvur

Offline security scanning for AI-generated code: seven open-source scanners and AI-specific checks in one command. It finds secrets, vulnerable, hallucinated and malicious dependencies, poisoned agent configuration, and infrastructure and code flaws. An MCP server for Claude Code and Kiro, and a CLI. Your source never leaves your machine.

dockerdna

Layer-by-Layer Container Security DNA Analysis — secrets detection, docker-compose scanning, CIS Docker Benchmark compliance, SBOM (CycloneDX), and SARIF output.

promptsanitizer

Secrets firewall for AI pipelines — redact credentials and PII before they reach (or leave) LLMs.

ianua-broker

Local-first, offline-by-default security posture scanner for MCP servers and local AI-agent setups (CLI: mcpscan).

traceredact

Redact PII & secrets from LLM prompts, agent traces & tool-call args before they hit your logs. Content-based detection (not just key names), CI-gateable, zero data retained.

praetor-security

Multi-engine static security analysis for code, repos, and AI agents: SAST, secrets, SCA, AI-security, and serialized-model/pickle scanning. Reports attack CHAINS and an agent capability profile. Reads, never runs. AGPL-3.0.

n0s1

Secret Scanner for Slack, Jira, Confluence, Asana, Wrike, Linear, Zendesk, GitHub, and GitLab

ajar-scanner

Defensive security scanner: fail-open logic, insecure defaults & web vulns (SQLi, NoSQLi, XSS, SSRF, CSRF, secrets) with data-flow taint analysis across 8 languages (Python, JS, TS, Go, Java, PHP, C#). Also audits your own machine's exposed ports/firewall. Analyzes and protects — never attacks.

cerbia-cli

A modular threat detection library for AI and LLM pipelines. It provides language-agnostic guardrails through a configurable pipeline of loaders, multi-layer de-obfuscation, specialized scanners, and automatic enforcement.

cerbia

A modular threat detection library for AI and LLM pipelines. It provides language-agnostic guardrails through a configurable pipeline of loaders, multi-layer de-obfuscation, specialized scanners, and automatic enforcement.

gorget

Security scanners for LLM prompts and responses: prompt injection, PII (incl. Russian documents), secrets, toxicity. Maintained continuation of LLM Guard; runs without PyTorch.

cerbia-core

A modular threat detection library for AI and LLM pipelines. It provides language-agnostic guardrails through a configurable pipeline of loaders, multi-layer de-obfuscation, specialized scanners, and automatic enforcement.

cerbia-ml

A modular threat detection library for AI and LLM pipelines. It provides language-agnostic guardrails through a configurable pipeline of loaders, multi-layer de-obfuscation, specialized scanners, and automatic enforcement.

cerbia-protectai

A modular threat detection library for AI and LLM pipelines. It provides language-agnostic guardrails through a configurable pipeline of loaders, multi-layer de-obfuscation, specialized scanners, and automatic enforcement.

vulngate

Agent-neutral security checks before you ship — SAST, secrets, and dependency audit as a merge gate. Find, understand, and fix vulnerabilities in AI- or human-written code. BYO-inference, $0, MIT.