# Yar

Yar is a Secrets Detection product. It runs on-premises. Pricing is free.

Yar is a reconnaissance tool for scanning organizations, users, and repositories to identify vulnerabilities and security risks during security assessments.

Checked October 2026.

## What is Yar?

Yar is a reconnaissance and enumeration tool designed for security assessments of organizations, users, and repositories.

The tool enables security professionals to scan for vulnerabilities and identify potential security risks across various targets. It focuses on gathering information that could be useful during penetration testing or security auditing activities.

Yar provides capabilities for systematically examining target environments to discover security weaknesses and misconfigurations. The tool supports scanning operations against organizational infrastructure and code repositories to identify potential attack vectors.

The tool is designed to assist in the reconnaissance phase of security testing by automating the discovery of security-relevant information across different target types.

Tags: Enumeration, Reconnaissance, Scanner

## Where it fits in your security program (NIST CSF 2.0)

- [Identify](https://cybersectools.com/guides/building-identify-program-small-team): helps you know your assets and your risks.

## Quick facts

- Category: [Application Security](https://cybersectools.com/categories/application-security) · [Secrets Detection](https://cybersectools.com/categories/secrets-detection)
- Deployment: On-Premises
- Company size fit: Startup, SMB, Mid-Market, Enterprise
- Pricing model: Free
- GitHub stars: 238
- Website: github.com

## Where it ranks

No shortlist covers this product's category yet. The closest is [Best Application Security Solutions for Business](https://cybersectools.com/shortlists/best-application-security-solutions).

## Yar FAQ

### What is Yar?

Yar is a product in the Secrets Detection category. It covers Enumeration, Reconnaissance and Scanner.

### What is the pricing for Yar?

Yar is free. Download and setup instructions are at https://github.com/nielsing/yar/.

### What are alternatives to Yar?

Alternatives to Yar listed on CybersecTools:

1. [Seekrets OSS](https://cybersectools.com/tools/seekrets-oss) - A secret scanning tool that examines NPM modules and ZIP files for exposed credentials and sensitive information using nuclei templates. (Free)
2. [Corgea PII/PHI Scanning](https://cybersectools.com/tools/corgea-pii-phi-scanning) - Scans Git repos for PII/PHI leaks in code, commits, and branches. (Commercial)
3. [Apiiro Secrets Security](https://cybersectools.com/tools/apiiro-secrets-security) - Detects, validates, and remediates secrets in code and pipelines (Commercial)
4. [Semgrep Secrets](https://cybersectools.com/tools/semgrep-secrets) - Detects hardcoded secrets in code using semantic analysis & validation (Commercial)
5. [Secrets Scanner](https://cybersectools.com/tools/secrets-scanner) - Detects API keys, passwords, and tokens in code with AI-based false positive filtering. (Commercial)

Compare all Yar alternatives at [https://cybersectools.com/alternatives/yar](https://cybersectools.com/alternatives/yar)

### What deployment and organization size does Yar fit?

Yar is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.

## Compare Yar with similar solutions

- [Yar vs Seekrets OSS](https://cybersectools.com/compare/seekrets-oss-vs-yar)
- [Yar vs Corgea PII/PHI Scanning](https://cybersectools.com/compare/corgea-pii-phi-scanning-vs-yar)
- [Yar vs Apiiro Secrets Security](https://cybersectools.com/compare/apiiro-secrets-security-vs-yar)

All alternatives to Yar: [/alternatives/yar](https://cybersectools.com/alternatives/yar)

---

Source: https://cybersectools.com/tools/yar

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on Yar: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md