
Gitleaks is a SAST tool for detecting and preventing hardcoded secrets in git repos.
Checked October 2026.
Gitleaks is a SAST tool for detecting and preventing hardcoded secrets like passwords, api keys, and tokens in git repos. It provides an easy-to-use, all-in-one solution for detecting secrets, past or present, in your code.
Gitleaks can be installed using Homebrew, Docker, or Go, and is also available in binary form for many popular platforms and OS types. It can be implemented as a pre-commit hook directly in your repo or as a GitHub action using Gitleaks-Action.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about Gitleaks: features, pricing and alternatives.
Gitleaks is a product in the Secrets Detection category. It covers Passwords, SAST and Secret Detection.
Gitleaks is free. Download and setup instructions are at https://github.com/gitleaks/gitleaks.
Alternatives to Gitleaks listed on CybersecTools:
Compare all Gitleaks alternatives at https://cybersectools.com/alternatives/gitleaks
Gitleaks is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
Monitor GitHub for sensitive data
Non-human identity security platform for secrets detection and management
A tool for searching a Git repository for interesting content
A powerful tool for searching and scraping data from GitHub
A reconnaissance tool for GitHub organizations
Continuous secret scanning and leak detection tool with precommit checks
On our shortlist?
No shortlist covers this product's category yet. The closest is Best Application Security Solutions for Business.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,033 products.
Connect your AI