Gitleaks
Gitleaks: A free, flexible scanner for Git history, CI workflows, files, and pre-commit checks. Ranked #8 of 24 in Secrets Scanning Software by our editors (8.5/10); pricing: Free plan; best for free CI and Git-history scanning.
At a glance
- Editor score8.5 / 10
- PricingFree plan
- Best forFree CI and Git-history scanning
- Free planYes
- Paid fromFree
- CI/CD scanningYes
- Facts checked22 Sep 2026
Where it wins
- Free and open source with Git repository and history scanning
- Custom TOML rules, baselines, allowlists, and configurable extensions
- GitHub Actions workflows plus JSON, CSV, JUnit, SARIF, and template reports
Where it doesn't
- Command-line focus may require engineering-led setup and maintenance
- Platform options center on macOS and self-hosted deployments
- GitHub Action licensing differs from the MIT-licensed core scanner
Our verdict on Gitleaks
Gitleaks is an open-source command-line secret scanner for teams that need to detect passwords, API keys, tokens, and other sensitive values in Git repositories, commit history, files, directories, or standard input. It fits development and security workflows that need free scanning across current content and historical commits, with support for Git, CI/CD scanning, pull-request scanning, push protection, and pre-commit checks. Its deployment options include macOS and self-hosted use, making it suited to teams that want control over where scanning runs.
The scanner’s workflow coverage is a central strength. It can run as a pre-commit hook and integrate with GitHub Actions for push, pull-request, scheduled, and manual workflows. Its listed integrations include GitHub, GitLab, Azure DevOps, Gitea, and Bitbucket. Baselines can suppress previously identified findings, while allowlists and configurable rule extensions help teams manage expected values. Custom detection rules use TOML configuration, and reports can be produced in JSON, CSV, JUnit, SARIF, or template formats for different review and CI pipelines.
Gitleaks is free and open source, so the published model centers on the scanner rather than paid plan tiers. The core scanner is MIT-licensed, while the GitHub Action has separate licensing and may require a free license key for organization accounts. The official repository describes Gitleaks as feature complete, with future releases containing security patches only. Choose it for free Git and history scanning with configurable rules and CI integration. Teams seeking a broader managed platform or a different deployment model should consider alternatives that match those requirements.
Your product? Our editors can test Gitleaks in depth and publish a review, labelled as paid · from $149/mo →
Gitleaks pricing
Gitleaks fact sheet
| Free plan | Yes |
|---|---|
| Paid from | Free |
| Supported VCS | GitHub, GitLab, Azure DevOps, Gitea, Bitbucket |
| CI/CD scanning | Yes |
| Pre-commit scanning | Yes |
| Pull-request scanning | Yes |
| Push protection | Not verified |
| Custom detection rules | Yes |
| Repository limit | Not verified |
| Deployment | Self-hosted |
| Platforms | Windows, macOS, Linux |
| Support | Community, Docs |
| Built for | Solo, Small business, Mid-market, Enterprise (editorial estimate) |
| Integrations | 4 integrations: GitHub Actions, pre-commit, Docker, Homebrew |
| Pricing | Free plan |
| Website | github.com |
| Facts checked | 22 Sep 2026 |
Gitleaks integrations
Gitleaks lists 4 integrations on its own site.
- GitHub Actions
- pre-commit
- Docker
- Homebrew
Alternatives to Gitleaks
- GitGuardianBroad secrets scanning with developer workflow controls, remediation, and enterprise deployment options.9.3
- TruffleHogDeep secret detection and credential verification for development and security teams.9.2
- KingfisherA broad, free scanner for exposed credentials across code, cloud, containers, and developer platforms.9.1
See all Gitleaks alternatives →
Gitleaks vs the competition
- Gitleaks vs GitGuardian
- Gitleaks vs TruffleHog
- Gitleaks vs Kingfisher
- Gitleaks vs ggshield
- Gitleaks vs Datadog Secret Scanning
- Gitleaks vs Vooda AI
Compare Gitleaks with any tool side by side →
Used Gitleaks? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Gitleaks for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Gitleaks is listed in our Secrets Scanning Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/gitleaks/"><img src="https://www.itechguides.com/best/badge/gitleaks.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update