32 tools found
Keeps your passwords and API keys in a proper secrets vault (Vault, AWS Secrets Manager, etc.) instead of loose in Kubernetes config, while still letting your apps read them the normal Kubernetes way — free, open source, and CNCF-backed.
A free proxy that lets AI agents make authenticated API calls without ever holding the actual API key in memory — the key stays in your OS keychain the whole time.
A free tool that swaps out your .env secrets for harmless placeholders on disk, so an AI coding assistant reading your project files never sees a real password or API key.
A free secrets manager built for the AI-coding-assistant era, designed so tools like Claude Code can use your API keys without ever actually reading the plaintext value.
An open-source password manager built for teams, letting IT staff securely share logins and secrets without ever exposing the plain-text password.
Open-source expiration tracker for certificates, API tokens, secrets and licenses, with alerts and automated renewal, self-hosted or cloud.
A gitignore-style rulebook for AI coding assistants: you list which files and secrets should never be shown to Cursor, Claude Code, or Windsurf, and Offsend blocks them locally before the agent ever sees your repo.
A proxy that sits between your app and the LLM API, blocking prompt-injection attacks and stripping leaked secrets before they reach the model — with an audit trail for every request.
A platform that finds and tracks every "non-human identity" in your company — API keys, service accounts, AI agents, secrets — and flags when one of them starts behaving suspiciously.
One app to SSH into servers, browse cloud storage buckets, run SQL queries and check secrets across AWS, GCP, Azure and 20+ other providers, instead of juggling a different console tab for each one.
A tiny command-line tool for backing up SSH keys and other secrets so securely encrypted that you could still recover them in 10 years using nothing but standard Unix tools — even if this tool itself is long gone.
Every AI provider asks you to trust that they won't peek at your data — Tinfoil instead runs your AI chats and API calls inside a locked hardware box (a "secure enclave") that's mathematically provable to be sealed off, even from Tinfoil's own engineers,
Free secrets scanner from Gitleaks' original creator: finds leaked API keys and passwords in code with far fewer false positives.
Open-source gateway that lets AI agents call APIs without ever seeing your real API keys — real secrets are injected transparently at the network level.
Community-governed, truly open-source secrets manager — a Linux Foundation fork of Vault, born when Vault went source-available.
copyright: — Xygeni is a comprehensive Software Supply Chain Security platform. It provides Advanced SAST with AI-powered remediation, Software Composition Analysis (SCA) with real-time malware detection, Infrastructure as Code (IaC) scanning, and Secrets detection to ensure end-to-end code security.
copyright: — Identify vulnerabilities that are unique to your code base before they reach production. Leverages the Code Property Graph (CPG) to run its analyses concurrently in a single graph of graphs. Automatically finds business logic flaws in dev like hardcoded secrets and logic bombs
copyright: — Enforster AI performs Contextual Code Security SAST, leveraging LLMs and artificial intelligence to reduce and enrich the detection of Logic Flaws, Secrets, Data leaks, Supply chain and technical vulnerabilities.
copyright: — Multi-language Static Application Security Testing (SAST) platform that detects critical vulnerabilities, including hardcoded secrets, weak cryptography, backdoors, SQL injections, insecure configurations, etc.
:yen: Trend Micro DeepSecurity offers runtime protection for container workloads and hosts as well as preruntime scanning of images to identify vulnerabilities, malware and content such as hardcoded secrets.
