Titus
Titus: A broad, open-source scanner for secrets across repositories, images, files, and HTTP traffic. Ranked #16 of 24 in Secrets Scanning Software by our editors (7.7/10); pricing: Free plan; best for open-source scanning across code, images, and files.
At a glance
- Editor score7.7 / 10
- PricingFree plan
- Best forOpen-source scanning across code, images, and files
- Free planYes
- Paid fromFree
- CI/CD scanningYes
- Founded2017
- Facts checked22 Sep 2026
Where it wins
- Scans code, Git history, repositories, images, documents, archives, and mobile packages
- Validates detected credentials against source APIs and supports custom YAML rules
- Exports JSON and SARIF reports with numeric scores and severity tiers
Where it doesn't
- Its supported version-control integrations are limited to GitHub and GitLab
- Command-line and library distribution can require teams to manage their own workflows
- Reporting is centered on JSON and SARIF rather than a broader listed format set
Our verdict on Titus
Titus is an open-source secrets scanner developed by Praetorian for security teams and developers who need to inspect more than source repositories. It scans source code, files, directories, Git history, public and private GitHub repositories, GitLab projects, Docker and OCI images, HTTP traffic, and mobile packages. The tool is available as a command-line application and Go library, with browser and Burp Suite extensions for additional inspection paths. Its free, Apache License 2.0 distribution suits teams that want to incorporate scanning into existing security workflows without selecting a paid plan.
Titus fits a varied security toolchain through GitHub, GitLab, GitHub Actions, Docker, OCI registries, Burp Suite, and Chrome integrations. CI/CD and pull request scanning are supported, while JSON and SARIF exports provide formats for downstream workflow integration. The coverage is especially useful when secrets may appear outside ordinary source files: Titus can extract text from Office files, PDFs, databases, archives, and mobile packages, then apply detection and severity logic across those inputs.
Its standout capability is breadth combined with validation. Titus can check detected credentials against source APIs, assign numeric finding scores and severity tiers, filter rules, and accept custom YAML detection rules. That makes it a practical fit for organizations with varied repositories, artifacts, and file types, especially those comfortable operating open-source security tooling. Teams focused specifically on GitHub and GitLab repositories may find its wider scanning scope more than they need, while teams seeking a managed commercial service or a narrower repository-only workflow should evaluate alternatives.
Your product? Our editors can test Titus in depth and publish a review, labelled as paid · from $149/mo →
Titus pricing
Titus fact sheet
| Free plan | Yes |
|---|---|
| Paid from | Free |
| Supported VCS | GitHub, GitLab |
| CI/CD scanning | Yes |
| Pre-commit scanning | Not verified |
| Pull-request scanning | Yes |
| Push protection | Not verified |
| Custom detection rules | Yes |
| Repository limit | Not verified |
| Deployment | Self-hosted, Browser extension |
| Platforms | Windows, macOS, Linux, Chrome extension |
| Support | Docs |
| Built for | Solo, Small business, Mid-market, Enterprise (editorial estimate) |
| Integrations | 6 integrations: GitHub, GitLab, Docker/OCI registries, GitHub Actions, Burp Suite, Chrome |
| Pricing | Free plan |
| Website | github.com |
| Facts checked | 22 Sep 2026 |
Titus integrations
Titus lists 6 integrations on its own site.
- GitHub
- GitLab
- Docker/OCI registries
- GitHub Actions
- Burp Suite
- Chrome
Alternatives to Titus
- GitGuardianBroad secrets scanning with developer workflow controls, remediation, and enterprise deployment options.9.3
- TruffleHogDeep secret detection and credential verification for development and security teams.9.2
- KingfisherA broad, free scanner for exposed credentials across code, cloud, containers, and developer platforms.9.1
Used Titus? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Titus for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Titus is listed in our Secrets Scanning Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/titus/"><img src="https://www.itechguides.com/best/badge/titus.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update