Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

Titus review

Free#16 of 24 in Secrets Scanning Software

A broad, open-source scanner for secrets across repositories, images, files, and HTTP traffic.

7.7/10Editor score
Visit Titus
Titus7.7 Visit Titus

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Titus is an open-source secrets scanner developed by Praetorian for security teams and developers who need to inspect more than source repositories. It scans source code, files, directories, Git history, public and private GitHub repositories, GitLab projects, Docker and OCI images, HTTP traffic, and mobile packages. The tool is available as a command-line application and Go library, with browser and Burp Suite extensions for additional inspection paths. Its free, Apache License 2.0 distribution suits teams that want to incorporate scanning into existing security workflows without selecting a paid plan.

Titus fits a varied security toolchain through GitHub, GitLab, GitHub Actions, Docker, OCI registries, Burp Suite, and Chrome integrations. CI/CD and pull request scanning are supported, while JSON and SARIF exports provide formats for downstream workflow integration. The coverage is especially useful when secrets may appear outside ordinary source files: Titus can extract text from Office files, PDFs, databases, archives, and mobile packages, then apply detection and severity logic across those inputs.

Its standout capability is breadth combined with validation. Titus can check detected credentials against source APIs, assign numeric finding scores and severity tiers, filter rules, and accept custom YAML detection rules. That makes it a practical fit for organizations with varied repositories, artifacts, and file types, especially those comfortable operating open-source security tooling. Teams focused specifically on GitHub and GitLab repositories may find its wider scanning scope more than they need, while teams seeking a managed commercial service or a narrower repository-only workflow should evaluate alternatives.

Titus pros and cons

  • Where it wins
    • Scans code, Git history, repositories, images, documents, archives, and mobile packages
    • Validates detected credentials against source APIs and supports custom YAML rules
    • Exports JSON and SARIF reports with numeric scores and severity tiers
  • Where it doesn't
    • Its supported version-control integrations are limited to GitHub and GitLab
    • Command-line and library distribution can require teams to manage their own workflows
    • Reporting is centered on JSON and SARIF rather than a broader listed format set

Titus fact sheet, pricing and score →

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update