Curated
GitGuardian
Platform that finds exposed secrets and credentials in code
Code SecuritySecrets detection at scale
Alternatives to HashiCorp Vault
12 tools like HashiCorp Vault, chosen by what they do. About HashiCorp Vault
Open source
TruffleHog
Open source scanner for leaked secrets, with live verification
Code SecurityFind and verify leaked secrets
Open source
Gitleaks
Finds leaked passwords and API keys in git repositories
Code SecurityFind leaked secrets in git
Freemium
Aikido
Security platform for code, dependencies, cloud and pentests
Code SecurityAll in one security for devs
Open source
Semgrep
Scans source code and dependencies for security issues
Code SecurityFast code security scanning
Open source
Trivy
Open source scanner for vulnerabilities and misconfigurations
Code SecurityOpen vulnerability scanner
Open source
OpenBao
Open source fork of HashiCorp Vault for managing secrets
Identity and SecretsOpen source secrets vault
Freemium
SonarQube
Checks code quality and security in every change, human or AI
Code SecurityCode quality and security
Freemium
Snyk
Finds security risks in AI-written code, agents and apps
Code SecurityFind and fix vulnerabilities
Open source
CodeQL
Code analysis engine that runs security queries across a codebase
Code SecuritySemantic code analysis engine
Curated
Checkmarx
Enterprise platform that scans code for security flaws and risks
Code SecurityEnterprise code security
Curated
Veracode
Platform for finding and fixing application security risks
Code SecurityApplication security platform