| enject - Hide .env secrets from AI coding tools | Secrets Management | Tools |
| Agent Vault - Keep secrets hidden from AI agents | Secrets Management | Tools |
| aivault - Stop leaking API keys to AI agents | Secrets Management | Tools |
| WardGate - Give AI agents API access without giving them secrets | Secrets Management | Tools |
| GAP - Give AI agents secure access to your APIs | Secrets Management | Tools |
| DepthFirst - Secrets Shouldn't Be Guesswork | Secrets Management | Tools |
| agent-sweep - find and redact secrets in AI coding agent histories | Secrets Management | Tools |
| API Radar - live feed of leaked LLM API keys found on GitHub | Secrets Management | Tools |
| Automic Vault - secrets manager that authorizes exact operations for AI agents | Secrets Management | Tools |
| Betterleaks: The Gitleaks Successor Built for Faster Secrets Scanning | Secrets Management | Tools |
| Dave Blumenfeld introduces keypo vault - Mac Secure Enclave secrets manager for agents | Secrets Management | Tools |
| dumpscan - extract secrets from kernel and Windows minidump memory | Secrets Management | Tools |
| ghtkn - CLI for short-lived GitHub App user access tokens | Secrets Management | Tools |
| git-alerts - monitor GitHub org users' public repos for secrets and sensitive files | Secrets Management | Tools |
| git-hound - Scans GitHub for leaked secrets using GitHub dorks | Secrets Management | Tools |
| github-actions-log-checker - scan GitHub Actions logs for exposed secrets | Secrets Management | Tools |
| github-secrets - find secrets in dangling and force-pushed GitHub commits | Secrets Management | Tools |
| GitleaksVerifier - CLI tool to verify secrets flagged by Gitleaks | Secrets Management | Tools |
| HasMySecretLeaked - GitGuardian search across exposed secrets on public GitHub | Secrets Management | Tools |
| Infisical - secrets, certificates and identity platform for developers and agents | Secrets Management | Tools |
| Introducing HAR Sanitizer: secure HAR sharing | Secrets Management | Tools |
| Introducing Kingfisher: Real-Time Secret Detection And Validation | Secrets Management | Tools |
| jit - just-in-time secrets behind Touch ID for your dev machine | Secrets Management | Tools |
| KeyDrop - reducing API key abuse | Secrets Management | Tools |
| Kingfisher - secret scanner with live validation and blast-radius mapping | Secrets Management | Tools |
| kubernetes-reflector - replicate secrets, configmaps and certificates across namespaces | Secrets Management | Tools |
| LeakLens - web-aware secrets scanner for JS apps, source maps and Git history | Secrets Management | Tools |
| LogShield - CLI that redacts secrets from logs before sharing | Secrets Management | Tools |
| LUKSbox - encrypted container vaults with FIDO2, TPM 2.0 and post-quantum keyslots | Secrets Management | Tools |
| Madeline Lawrence on Betterleaks - new open source secrets scanner from the Gitleaks author | Secrets Management | Tools |
| mantra - hunt down API key leaks in JS files and pages | Secrets Management | Tools |
| Nosey Parker - finds secrets and sensitive information in text and Git history | Secrets Management | Tools |
| OpenBao - open-source secrets, certificates and key management | Secrets Management | Tools |
| pivit - manage x509 certificates on PIV smart cards for git signing | Secrets Management | Tools |
| postleaks - search for sensitive data in Postman public library | Secrets Management | Tools |
| retriever - secure client-side secret sharing in the browser using web crypto | Secrets Management | Tools |
| Retriever - serverless secret sharing in the browser with Web Crypto, by Corgea | Secrets Management | Tools |
| secret-bridge - Monitors GitHub for leaked secrets | Secrets Management | Tools |
| secrets-patterns-db - open-source regex database for detecting secrets and API keys | Secrets Management | Tools |
| sift - credential and sensitive-data exposure triage for file shares | Secrets Management | Tools |
| Straylight-AI - AI agent credential proxy for zero-knowledge secret management | Secrets Management | Tools |
| Sulla - scan SMB shares for secrets with NoseyParker | Secrets Management | Tools |
| truffleshow - client-side web viewer for TruffleHog JSON output | Secrets Management | Tools |
| webtrufflehog - browser extension scanning web traffic for exposed secrets | Secrets Management | Tools |
| Amp Code - Secret Redaction | Secrets Management | Platform Features |
| Amp Security Reference - Secret Redaction | Secrets Management | Platform Features |
| Secret Redaction in GitHub Copilot (Issue #11517) | Secrets Management | Platform Features |
| Advanced Data Protection now available in HCP Vault | Secrets Management | Platform Features |
| Doppler Bug Bounty Program on HackerOne | Secrets Management | Platform Features |
| GitGuardian - Monitor Public GitHub for leaked secrets | Secrets Management | Platform Features |
| GitHub secret scanning AI-generated custom patterns | Secrets Management | Platform Features |
| GitHub Secret Scanning Partner Program | Secrets Management | Platform Features |
| GitHub secret scanning shows metrics for push protection at the organization level | Secrets Management | Platform Features |
| HashiCorp acquires BluBracket to add secrets scanning | Secrets Management | Platform Features |
| Introducing Cloudflare Secrets Store Beta | Secrets Management | Platform Features |
| Introducing fine-grained personal access tokens | Secrets Management | Platform Features |
| Introducing GitHub Secret Protection and GitHub Code Security | Secrets Management | Platform Features |
| Multi-secondary performance replication is now available on HCP Vault | Secrets Management | Platform Features |
| OpenTofu 1.7.0 with State Encryption and Provider-Defined Functions | Secrets Management | Platform Features |
| Pasha Sviderski on Docker's native Secrets Engine - secret references injected at runtime | Secrets Management | Platform Features |
| Secret scanning detects generic passwords with AI, public beta - GitHub Changelog | Secrets Management | Platform Features |
| Semantic Analysis for Secrets Detection - Semgrep Secrets | Secrets Management | Platform Features |
| Vault PR 22484 - advanced TTL management for database static roles | Secrets Management | Platform Features |
| A better way to limit Claude Code access to secrets | Secrets Management | Guides |
| Don't let AI read your .env files (Filip Hric / 1Password approach) | Secrets Management | Guides |
| Access Azure Key Vault from a Local Kubernetes Cluster with Azure Arc Workload Identity | Secrets Management | Guides |
| Anyone can Access Deleted and Private Repository Data on GitHub - Truffle Security | Secrets Management | Guides |
| API Security Best Practices - Leak Mitigation Checklist | Secrets Management | Guides |
| Automate Postman Secret Scanning with TruffleHog | Secrets Management | Guides |
| Azure AD Client Secret Leak: The Keys to Cloud | Secrets Management | Guides |
| Behind GitHub's new authentication token formats | Secrets Management | Guides |
| Charlie Marsh on uv pipeline breaking over Bearer Token redaction in GitHub Actions | Secrets Management | Guides |
| Cracking the Vault: Zero-Day Flaws in Authentication, Identity, and Authorization in HashiCorp Vault | Secrets Management | Guides |
| Detecting and removing dangerous secrets on dev workstations before Shai-Hulud does | Secrets Management | Guides |
| Google API keys keep working after you delete them long enough to be exploited | Secrets Management | Guides |
| Google API Keys Weren't Secrets, But Then Gemini Changed the Rules | Secrets Management | Guides |
| Hidden GitHub Commits and How to Reveal Them | Secrets Management | Guides |
| How I Found 3,800+ Leaked Secrets on GitHub Archive Using AI | Secrets Management | Guides |
| How I Scanned all of GitHub's Oops Commits for Leaked Secrets - Truffle Security | Secrets Management | Guides |
| How to Monitor GitHub for Secrets - Duo Labs | Secrets Management | Guides |
| jtgi on wallet drained after leaked private key in old public GitHub commit | Secrets Management | Guides |
| Keeping Secrets Out of Logs | Secrets Management | Guides |
| Leaked-Credentials - finding leaked credentials with DevTools regex | Secrets Management | Guides |
| Making TruffleHog Faster with Aho-Corasick | Secrets Management | Guides |
| Martez Reed on authenticating to HashiCorp Vault from Proxmox with JWT auth | Secrets Management | Guides |
| Native Secure Enclave backed SSH keys on macOS | Secrets Management | Guides |
| Regex is almost all you need - how Gitleaks combines regex, entropy and allowlists to find secrets | Secrets Management | Guides |
| The Day We Unveiled the Secret Rotation Illusion | Secrets Management | Guides |
| The end of GitHub PATs: You can't leak what you don't have | Secrets Management | Guides |
| The Postman Carries Lots of Secrets - leaked credentials in public Postman workspaces | Secrets Management | Guides |
| The State of Secrets Sprawl Report 2025 | Secrets Management | Guides |
| The Trivy Attack Revealed a Blind Spot in Every Secrets Manager | Secrets Management | Guides |
| Thousands of Exposed Secrets Found on Docker Hub | Secrets Management | Guides |
| Top HashiCorp Vault Alternatives | Secrets Management | Guides |
| Unauthorized access to any organization's Codespace secrets via a GitHub Security Advisory flaw | Secrets Management | Guides |
| Security Engineer Agent (claude-code-toolkit): Infrastructure security, IAM, mTLS, secrets management | Coding Tools | Coding Tools and Assistants |