Yar
Yar is a reconnaissance tool for scanning organizations, users, and repositories to identify vulnerabilities and security risks during security assessments.
Yar is a reconnaissance tool for scanning organizations, users, and repositories to identify vulnerabilities and security risks during security assessments.
Checked October 2026.
Yar is a reconnaissance and enumeration tool designed for security assessments of organizations, users, and repositories.
The tool enables security professionals to scan for vulnerabilities and identify potential security risks across various targets. It focuses on gathering information that could be useful during penetration testing or security auditing activities.
Yar provides capabilities for systematically examining target environments to discover security weaknesses and misconfigurations. The tool supports scanning operations against organizational infrastructure and code repositories to identify potential attack vectors.
The tool is designed to assist in the reconnaissance phase of security testing by automating the discovery of security-relevant information across different target types.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about Yar: features, pricing and alternatives.
Yar is a product in the Secrets Detection category. It covers Enumeration, Reconnaissance and Scanner.
Yar is free. Download and setup instructions are at https://github.com/nielsing/yar/.
Alternatives to Yar listed on CybersecTools:
Compare all Yar alternatives at https://cybersectools.com/alternatives/yar
Yar is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
A Chrome browser extension that uses machine learning to detect and alert users about sensitive data exposure and potential data breaches across web environments.
A Python script that scans file systems to identify hardcoded credentials
A static code analysis tool for parsing common data formats to detect hardcoded credentials and dangerous functions.
Scans code for exposed API keys, credentials, and tokens in repos and CI/CD.
Detects, validates, and remediates secrets in code and pipelines
APKLeaks is a command-line tool that scans Android APK files to identify embedded URIs, endpoints, and secrets for security assessment purposes.
On our shortlist?
No shortlist covers this product's category yet. The closest is Best Application Security Solutions for Business.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,030 products.
Connect your AI
