# Gitleaks

Gitleaks is a Secrets Detection product. It runs on-premises. Pricing is free.

Gitleaks is a SAST tool for detecting and preventing hardcoded secrets in git repos.

Checked October 2026.

## What is Gitleaks?

Gitleaks is a SAST tool for detecting and preventing hardcoded secrets like passwords, api keys, and tokens in git repos. It provides an easy-to-use, all-in-one solution for detecting secrets, past or present, in your code. Gitleaks can be installed using Homebrew, Docker, or Go, and is also available in binary form for many popular platforms and OS types. It can be implemented as a pre-commit hook directly in your repo or as a GitHub action using Gitleaks-Action.

Tags: Passwords, SAST, Secret Detection

## Where it fits in your security program (NIST CSF 2.0)

- [Protect](https://cybersectools.com/guides/building-protect-program-small-team): helps you prevent attacks and keep data safe.

## Quick facts

- Category: [Application Security](https://cybersectools.com/categories/application-security) · [Secrets Detection](https://cybersectools.com/categories/secrets-detection)
- Deployment: On-Premises
- Company size fit: Startup, SMB, Mid-Market, Enterprise
- Pricing model: Free
- GitHub stars: 23,170
- Website: github.com

## Where it ranks

No shortlist covers this product's category yet. The closest is [Best Application Security Solutions for Business](https://cybersectools.com/shortlists/best-application-security-solutions).

## Gitleaks FAQ

### What is Gitleaks?

Gitleaks is a product in the Secrets Detection category. It covers Passwords, SAST and Secret Detection.

### What is the pricing for Gitleaks?

Gitleaks is free. Download and setup instructions are at https://github.com/gitleaks/gitleaks.

### What are alternatives to Gitleaks?

Alternatives to Gitleaks listed on CybersecTools:

1. [Secrets Catcher](https://cybersectools.com/tools/secrets-catcher) - Scans corporate infra for hardcoded credentials, tokens & sensitive data leaks. (Commercial)
2. [Secrets Security](https://cybersectools.com/tools/secrets-security) - Detects, prioritizes, and auto-revokes exposed secrets across the SDLC (Free)
3. [GitGuardian Non-Human Identity security](https://cybersectools.com/tools/gitguardian-non-human-identity-security) - Non-human identity security platform for secrets detection and management (Commercial)
4. [Opsera GitCustodian](https://cybersectools.com/tools/opsera-gitcustodian) - Scans source code repositories for exposed secrets and sensitive data (Commercial)
5. [Spectral Stop leaks at the source!](https://cybersectools.com/tools/spectral-stop-leaks-at-the-source) - Prevents secrets & sensitive data leaks in code at source (Commercial)

Compare all Gitleaks alternatives at [https://cybersectools.com/alternatives/gitleaks](https://cybersectools.com/alternatives/gitleaks)

### What deployment and organization size does Gitleaks fit?

Gitleaks is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.

## Compare Gitleaks with similar solutions

- [Gitleaks vs Secrets Catcher](https://cybersectools.com/compare/gitleaks-vs-secrets-catcher)
- [Gitleaks vs Secrets Security](https://cybersectools.com/compare/gitleaks-vs-secrets-security)
- [Gitleaks vs GitGuardian Non-Human Identity security](https://cybersectools.com/compare/gitguardian-non-human-identity-security-vs-gitleaks)

All alternatives to Gitleaks: [/alternatives/gitleaks](https://cybersectools.com/alternatives/gitleaks)

---

Source: https://cybersectools.com/tools/gitleaks

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on Gitleaks: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md