A secret scanning tool that examines NPM JS modules and ZIP files for exposed credentials and sensitive information. The tool integrates with nuclei and nuclei-templates to perform scanning operations on codebases. It provides functionality to: - Download and extract NPM packages for analysis - Scan ZIP files for potential secrets - Detect various types of credentials including API keys, database connections, and authentication tokens - Generate detailed reports showing affected files, severity levels, and exposed information The scanner identifies sensitive data patterns in source code, configuration files, and environment variables to help prevent accidental exposure of confidential information in software supply chains.
FEATURES
ALTERNATIVES
Akamai App & API Protector is an integrated security solution that safeguards web applications and APIs against various cyber threats using edge computing and adaptive technologies.
ConDroid performs concolic execution of Android apps to observe 'interesting' behavior in dynamic analysis.
APKiD is a tool that identifies compilers, packers, obfuscators, and other weird stuff in APK files.
A comprehensive web application security testing solution that offers built-in vulnerability assessment and management, as well as integration options with popular software development tools.
Automatic tool for pentesting XSS attacks against different applications
Application monitoring and security platform that provides runtime visibility, threat detection, and automated response capabilities for application-layer security
Real-time, eBPF-based Security Observability and Runtime Enforcement component
Pint is a PIN tool that exposes the PIN API to lua scripts, allowing dynamic instrumentation of binaries.
PINNED

InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.

Mandos Brief Newsletter
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.

Kriptos
An AI-driven data classification and governance platform that automatically discovers, analyzes, and labels sensitive information while providing risk management and compliance capabilities.

System Two Security
An AI-powered platform that automates threat hunting and analysis by processing cyber threat intelligence and generating customized hunt packages for SOC teams.

Aikido Security
Aikido is an all-in-one security platform that combines multiple security scanning and management functions for cloud-native applications and infrastructure.

Permiso
Permiso is an Identity Threat Detection and Response platform that provides comprehensive visibility and protection for identities across multiple cloud environments.

Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.

Adversa AI
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.