Talisman
Talisman: A free local scanner for catching secrets before commits, pushes, and history sharing. Ranked #21 of 24 in Secrets Scanning Software by our editors (7.2/10); pricing: Free plan; best for free local Git hook and history scanning.
At a glance
- Editor score7.2 / 10
- PricingFree plan
- Best forFree local Git hook and history scanning
- Free planYes
- Paid fromFree
- CI/CD scanningYes
- Facts checked22 Sep 2026
Where it wins
- Covers pre-commit, pre-push, and repository history scanning
- Detects encoded values, entropy, filenames, payment cards, and custom patterns
- Runs on macOS, Linux, and Windows with configurable severity thresholds
Where it doesn't
- Focuses on Git workflows rather than a hosted scanning service
- Does not list a paid tier or hosted repository-management features
- Its integrations are limited to pre-commit, Husky, and Homebrew
Our verdict on Talisman
Talisman is an open-source secrets-scanning utility from ThoughtWorks for developers and teams that want local checks around Git activity. It installs Git hooks to inspect outgoing changesets for potential secrets and sensitive information, including authorization tokens, SSH keys, private keys, suspicious filenames, encoded values, high-entropy content, and credit-card numbers. It supports Git on macOS, Linux, and Windows, and can also scan repository history from the command line. For teams prioritizing free, developer-controlled protection before code leaves a workstation, Talisman is a focused fit.
Its strongest area is detection depth within a local Git workflow. Talisman supports pre-commit and pre-push scanning, repository history scanning, custom regular-expression search patterns, ignored files, detector severity settings, and configurable severity thresholds. Detection can consider file contents, filenames, entropy, file size, encoded values, and payment-card numbers. HTML reporting adds a shareable output format for scan results. Integrations with pre-commit, Husky, and Homebrew help it fit common local development setups, while its support for all three major desktop operating systems broadens deployment options.
Talisman is most suitable for individuals and teams that want an open-source utility running close to the developer workflow, without a hosted commercial service or paid repository tier. Its scope is narrower than a platform built around centralized security administration, pull-request workflows, or a broader cloud-based development pipeline. Choose it when pre-commit, pre-push, and history checks are the priority, along with custom detection rules and local control. Consider an alternative if your requirements center on managed repository coverage, a hosted service, or capabilities beyond Git hooks and command-line history scanning.
Your product? Our editors can test Talisman in depth and publish a review, labelled as paid · from $149/mo →
Talisman pricing
Talisman fact sheet
| Free plan | Yes |
|---|---|
| Paid from | Free |
| Supported VCS | Git |
| CI/CD scanning | Yes |
| Pre-commit scanning | Yes |
| Pull-request scanning | Not verified |
| Push protection | Yes |
| Custom detection rules | Yes |
| Repository limit | Not verified |
| Deployment | Desktop |
| Platforms | Windows, macOS, Linux |
| Support | Docs, Community |
| Built for | Solo, Small business, Mid-market, Enterprise (editorial estimate) |
| Pricing | Free plan |
| Website | thoughtworks.github.io |
| Facts checked | 22 Sep 2026 |
Alternatives to Talisman
- GitGuardianBroad secrets scanning with developer workflow controls, remediation, and enterprise deployment options.9.3
- TruffleHogDeep secret detection and credential verification for development and security teams.9.2
- KingfisherA broad, free scanner for exposed credentials across code, cloud, containers, and developer platforms.9.1
See all Talisman alternatives →
Used Talisman? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Talisman for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Talisman is listed in our Secrets Scanning Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/talisman/"><img src="https://www.itechguides.com/best/badge/talisman.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update