Scans code for exposed secrets, API keys, tokens, and credentials across 69 patterns covering cloud services, AI platforms, payment providers, authentication services, and databases.
Enables an agent to scan text for leaked credentials locally before it writes or commits it, flagging known key, token, private-key and sensitive-filename patterns with redacted, line-level findings and no network calls. Detection is deliberately specific to avoid false positives that would block unattended agents.
Scans diffs, files, and snippets for leaked secrets like AWS keys, GitHub tokens, and private keys, returning redacted findings while running fully locally without network calls.
Scans files, directories, and environment configurations for exposed secrets, API keys, and credentials, redacting matches and providing allowlist support. Enables natural-language secret detection in projects and CI/CD integration via CLI.