Best Yar Alternatives & Competitors in 2026

Corgea PII/PHI Scanning

Scans Git repos for PII/PHI leaks in code, commits, and branches.

Seekrets OSS

A secret scanning tool that examines NPM modules and ZIP files for exposed credentials and sensitive information using nuclei templates.

cred_scanner

A Python command line tool that scans directories for AWS credentials in files, designed for CI/CD integration to prevent credential exposure in builds.

Dufflebag

Dufflebag searches through public AWS EBS snapshots to identify accidentally exposed secrets and sensitive information.

GitRob

A reconnaissance tool for GitHub organizations

Xygeni Secrets Security

Detects and prevents secrets leakage across the software development lifecycle

iScan Advanced Scanning Tool

Scans repositories for exposed secrets, API keys, and credentials for bug bounty

Checkmarx Secrets Detection

Detects hardcoded secrets in code repos, commits, and containers

Aikido Secrets Detection

Scans code for exposed API keys, credentials, and tokens in repos and CI/CD.

Datadog Code Security Secret Scanning

Scans code repositories and runtime environments for exposed secrets and credentials

Apiiro Secrets Security

Detects, validates, and remediates secrets in code and pipelines

Qwiet AI Secrets Detection

Detects secrets and credentials in code using AI/ML and Code Property Graph

Cycode Secrets Detection and Scanning

Scans and detects hardcoded secrets across SDLC and dev tools

Semgrep Secrets

Detects hardcoded secrets in code using semantic analysis & validation

GitGuardian Non-Human Identity security

Non-human identity security platform for secrets detection and management

Opsera GitCustodian

Scans source code repositories for exposed secrets and sensitive data

Spectral Stop leaks at the source!

Prevents secrets & sensitive data leaks in code at source

Spectral Ops Container Scanning

Container scanning tool for detecting secrets, misconfigurations, and code issues

Corgea Secret Scanning

Detects exposed API keys, tokens, credentials & PII in code repositories

Secrets Scanner

Detects API keys, passwords, and tokens in code with AI-based false positive filtering.

BitPatrol

AI-powered secret detection tool for real-time credential scanning in code

TruffleHog Enterprise

Enterprise secrets scanning tool for SDLC with continuous monitoring & remediation

TruffleHog Analyze

Analyzes leaked secrets to reveal ownership, access scope, and permissions

TruffleHog Forager

Scans public internet for leaked cloud service keys and verifies them

Truffle Security Analyzers

Credential verification service that validates leaked secrets for liveness

Detectors

Detects exposed API keys and credentials across multiple cloud services

Infisical Radar

Continuous secret scanning and leak detection tool with precommit checks

weSecretFinder

A Python script that scans file systems to identify hardcoded credentials

APKLeaks

APKLeaks is a command-line tool that scans Android APK files to identify embedded URIs, endpoints, and secrets for security assessment purposes.

detect-secrets

A pre-commit security tool that scans source code repositories to detect and prevent secrets like API keys, passwords, and credentials from being committed to version control systems.

Keyscope

A key and secret validation workflow tool built in Rust, supporting over 30 providers and exporting to JSON or CSV.

SecretScanner

SecretScanner is a standalone tool that scans container images and filesystems to detect approximately 140 types of unprotected secrets and sensitive credentials.

Shellclear

A command-line tool that secures shell command history by clearing sensitive commands, displaying command summaries, and providing stash functionality for presentations across multiple shell environments.

git-secrets

Prevents you from committing passwords and other sensitive information to a git repository.

DumpsterDiver

DumpsterDiver analyzes large datasets to detect hardcoded secrets, keys, and passwords using entropy calculations and customizable search rules.

TruffleHog

Find leaked credentials by scanning repositories for high entropy strings.

Gitleaks

Gitleaks is a SAST tool for detecting and preventing hardcoded secrets in git repos.

Whispers

A static code analysis tool for parsing common data formats to detect hardcoded credentials and dangerous functions.

gitGraber

Monitor GitHub for sensitive data

Talisman

Pre-commit hook for validating outgoing changeset

GitGot

A tool for identifying sensitive secrets in public GitHub repositories

git-all-secrets

A tool that combines multiple open source Git scanning utilities to detect and list secrets stored in Git repositories for security audits and compliance checks.

GitMiner

A powerful tool for searching and scraping data from GitHub

shhgit

A secrets detection tool that scans GitHub, GitLab, and Bitbucket repositories to identify API keys, access tokens, and other sensitive information in source code.

Rusty Hog

A suite of secret scanners built in Rust for performance.

Secret Bridge

Secret Bridge monitors GitHub repositories to detect and alert on leaked secrets and sensitive data exposure.

EarlyBird

A sensitive data detection tool for scanning source code repositories

Trufflehog-Chrome-Extension

A Chrome browser extension that uses machine learning to detect and alert users about sensitive data exposure and potential data breaches across web environments.