tabteca
Sign in
ES EN
Editor's pick

GitGuardian

Detect leaked keys and secrets in your code.

What it is

It scans the repository's entire history and every new commit looking for credentials, tokens and private keys. It includes a pre-commit hook to block the secret before it even leaves your machine.

Best for

Avoiding the classic AWS token pushed by mistake.

What the free plan includes

  • Up to 25 developers
  • 100 incidents per month
  • Scans history and new commits
  • Integrates with GitHub, GitLab and Bitbucket

Free plans change often. Confirm the limits on the official page before deciding.

Socket

Analyse supply chain risk across npm.

Free for open source projects

Mozilla Observatory

Audit security headers and TLS configuration.

Free, no account needed

No sign-up

Have I Been Pwned

Pick

Check for credentials exposed in known breaches.

Pwned Passwords free and key-free