#secret scanning

SAST

InsomniaSAST

Inline secret + vulnerability scanning for your editor. Catches AWS/Stripe/JWT secrets, SQLi, command-injection and dependency CVEs as you save, and blocks git pushes that would leak them.

AppsecD

bira

Shift-left AppSec for VS Code & Cursor — SAST + secret scan on every commit, AI-powered fix suggestions, and a per-org governance dashboard. Powered by appsec.shiprocket.in.

SecretLoader

KiviAS

Pulls secrets from your vault and provides them to your app as environment variables when you run or debug, so they don't have to live in your config files. Works with Infisical, Doppler, HashiCorp Va

Envify: Secret Scanner to prevent API key leaks

paulning576

Prevent accidental API key leaks — real-time secret detection with one-click fixes for VS Code

SecretGuard - Secret Detection

secretguard-cli

Real-time secret detection — catches API keys, tokens, and credentials as you type

SoterAI IDE Guard — Local AI Security

soterai

Protect secrets, prompts, MCP tools, terminal commands, and AI coding context locally before they reach AI.

Veilo — Secret & PII Scanner

veilo

Catch secrets, credentials & PII in your code before commit — 100% local, nothing leaves your machine.

Netallion AI Assurance

netallion

Enterprise Agentic Development Governance — secret scanning, MCP trust governance, AI provider inventory, and policy enforcement for AI-powered IDEs

Picket

willibrandon

Local-first secrets scanning for Azure Pipelines.