#secrets

SecretScanner — Catch Leaked Secrets

mjethwa-streamlit

Scan your code for accidentally committed API keys, tokens, and secrets before they hit git history.

Sessyn Sync

aegyrix

Securely sync your full developer workspace between trusted machines — .env, certs, configs, API keys — all encrypted end-to-end.

Local-first data-loss prevention for developers. Redacts API keys, secrets, PII, and CUI markings before code or text reaches AI assistants like Copilot, ChatGPT, or Claude. 65+ patterns, air-gap friendly, zero telemetry.

Tegin Env Manager

teginsoft

Compare .env, .env.local, .env.production and other env files side by side in a table, spot missing variables at a glance, and generate .env.example in one click.

leakferret

leakferret

Context-aware secret detection. Stops you (and your agent) from committing live keys. Uses your own LLM for classification — no extra API key.

SecretLoader

KiviAS

Pulls secrets from your vault and provides them to your app as environment variables when you run or debug, so they don't have to live in your config files. Works with Infisical, Doppler, HashiCorp Vault, AWS Secrets Manager, or any CLI that prints JSON.

DiffGate — Review Gate for AI Code

srbsa

A deterministic guardrail for AI-edited code, inline on the lines you actually changed (🟢 merge / 🟡 glance / 🟠 verify). 0 false blocks; the same verdict as the DiffGate CLI and MCP server.

Alert Security

Nikhil-8814

AI-assisted secret scanning for git commits and pushes.

CleanMyPrompt — AI Security & Token Intelligence

cleanmyprompt

Stop leaking secrets. Stop burning tokens. Intercepts API keys, PII & credentials before they reach Copilot, and compresses code with LSP-aware squeeze to cut token costs by 30–70%. 100% local.

EnvSwitch

bobsk8

Switch between .env profiles (dev, staging, prod) with one click. Secrets stored in the OS keychain — never in plaintext on disk.

AI Quality Gate

FriedCode

Audits AI-generated code diffs to prevent vibe coding leakage.

Oconee Runtime

OconeeRuntime

AI action governance for coding agents — real-time policy enforcement, prompt/secret scanning, and telemetry across VS Code, Cursor, and Windsurf (Copilot, Cursor, Windsurf, OpenAI Codex, Claude Code).