detect-secrets

At a glance

• Editor score
  7.9 / 10
• Pricing
  Open source
• Best for
  Developers wanting free baseline-based Git scanning
• Paid from
  Free
• Facts checked
  22 Sep 2026

• Where it wins

  • Free open-source scanning across Linux, macOS, and Windows
  • Baselines, allowlisting, filters, and custom detector plugins
  • Pre-commit hooks plus optional network-based secret verification

• Where it doesn't

  • Listed integration support centers on the pre-commit framework
  • Command-line workflows require developer or CI/CD integration
  • Baseline management adds review and maintenance work

Our verdict on detect-secrets

detect-secrets is an open-source Python module from Yelp for finding potential secrets in repositories and code files. It is aimed at developers and security teams working with Git-based development workflows who want a free scanning layer across Linux, macOS, and Windows. The project detects possible credentials using regex-based, entropy-based, and keyword-based detectors, with built-in plugins for secret types associated with services such as AWS, GitHub, GitLab, Slack, Stripe, and Twilio.

Its strongest capability is baseline-driven review. Findings can be recorded in a baseline, audited over time, and labeled as true or false positives. Inline allowlisting, configurable exclusion filters, plugin tuning, custom filters, and custom detector plugins give teams control over how scanning behaves in their codebases. Staged-file checks through a command-line hook and integration with the pre-commit framework help place checks inside the developer workflow, while optional network-based verification adds another way to assess detected secrets.

The trade-off is a focused, integration-led approach rather than a broad platform experience. The published capabilities center on repository and file scanning, Git workflows, pre-commit checks, and command-line CI/CD usage. Teams should expect to manage baselines and shape the rules around their repositories, especially when handling false positives or organization-specific secret formats. detect-secrets fits developers who want open-source control and a configurable foundation for preventing new secrets from entering repositories. Teams seeking a wider built-in ecosystem or a dedicated pull-request interface should consider a different category of tool.

Your product? Our editors can test detect-secrets in depth and publish a review, labelled as paid · from $149/mo →

detect-secrets pricing

detect-secrets fact sheet

detect-secrets integrations

detect-secrets lists 2 integrations on its own site.

• pre-commit
• GitHub Actions

Alternatives to detect-secrets

• GitGuardianBroad secrets scanning with developer workflow controls, remediation, and enterprise deployment options.9.3
• TruffleHogDeep secret detection and credential verification for development and security teams.9.2
• KKingfisherA broad, free scanner for exposed credentials across code, cloud, containers, and developer platforms.9.1

See all detect-secrets alternatives →

Featured on iTechGuides

detect-secrets is listed in our Secrets Scanning Software directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/detect-secrets/"><img src="https://www.itechguides.com/best/badge/detect-secrets.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated 7 Oct 2026 · How we research and update