SOFTWARE / APPLICATION SECURITY TESTING TOOLS / GITLEAKS

Gitleaks

Open-source secret scanner for git repositories

Ranked #10 in Open-source application security testing tools.

Gitleaks is an open-source secret scanner for git repositories. It is the most trusted tool among security professionals and enterprises.

Official website

At a glance

Best for

Security professionals and developers

From Gitleaks's own website.

Facilities and features

Its website also mentions:

Self-serve sign-up

What stands out

The product boasts over 16 million Docker downloads.

“With over 16 million docker downloads, 17k GitHub stars, 9 million GitHub Downloads, thousands of weekly clones,”Gitleaks, own website

Gitleaks allows automatic scanning on pull requests and commits.

“You can use it to automatically run a gitleaks scan on all your team's pull requests and commits,”Gitleaks, own website

How it ranks

Gitleaks is ranked 10th of 10 in Open-source application security testing tools (Lister Score 68.0).

#10 in Open-source application security testing tools · Lister Score 68.0

Allows automatic scanning on pull requests and commits.

How the score is made up: fit to this ranking's criteria 40; evidence on its own site 16; how complete its published information is 8; buying information on its own site 4.

“Gitleaks is an open-source secret scanner for git repositories, files, and directories.”Gitleaks, own website

“With over 16 million docker downloads, 17k GitHub stars, 9 million GitHub Downloads, thousands of weekly clones, and over 700k homebrew installs, gitleaks is the most trusted open-source secret scanner among security professionals, enterprises, and developers.”Gitleaks, own website