Secrets detection
Scanning of code, repositories and collaboration tools for exposed credentials, keys and tokens.
11 vendors · alphabetical
- Clutch SecurityClutch Security sells a platform that treats every agent as a non-human identity with credentials and governs those credentials through their full lifecycle across 100+ integrations.Ownership not established
- Endor LabsEndor Labs sells AURI, a security intelligence layer for AI coding agents.Privately held
- GitGuardianGitGuardian sells a platform with continuous coverage across code, CI/CD, containers, developer endpoints, cloud IAM, vaults, AI coding tools, and collaboration platforms.Privately held · primary category
- GitHub Advanced SecurityGitHub Advanced Security is sold as Code Security and Secret Protection together, to find and fix vulnerabilities and leaked secrets.Ownership not established
- GitLabGitLab states that software teams and their agents plan, build, secure, and ship on one control plane.Public (Nasdaq Global Market: GTLB)
- HashiCorpHashiCorp sells The Infrastructure Cloud, an integrated platform that turns Infrastructure Lifecycle Management and Security Lifecycle Management into code.Owned by IBM since 2025
- JFrogJFrog describes the inputs and outputs of a software release as including binaries, packages, AI/ML models, agent skills, MCP servers, and plugins.Public (Nasdaq: FROG)
- Legit SecurityLegit Security sells a SaaS security solution and ASPM platform that automates security issue discovery.Ownership not established
- SemgrepSemgrep sells an application security platform that unifies SAST, SCA, secrets scanning, and malware protection.Privately held
- SnykSnyk sells the AI Security Platform, which secures the code AI writes, the agents it runs, and the applications it builds.Ownership not established
- Truffle SecurityTruffle Security is the company behind TruffleHog, an open-source security project.Privately held · primary category