kingfisher
A high-performance open-source secret scanner with live validation, blast radius mapping, and 700+ detection rules for code, Git, CI, cloud, and SaaS platforms.
What is kingfisher?
Kingfisher is an open-source secret scanner that detects leaked API keys, tokens, and credentials in source code, Git history, cloud storage, and SaaS platforms. It solves the problem of credential exposure by combining high-performance pattern matching with live validation against provider APIs to confirm active secrets and assess their potential impact.
Security engineers (both offensive and defensive), DevOps teams, and developers who need to proactively find and remediate exposed credentials in their codebases, CI/CD pipelines, and integrated platforms.
Developers choose Kingfisher for its unique combination of speed, accuracy, and actionable intelligence—it not only finds secrets but validates them live, maps their blast radius, and allows direct revocation, reducing false positives and providing context for rapid triage.
Overview
Detect leaked secrets + live validation. Map blast radius across your stack. Revoke fast. 950+ rules.
Use Cases
Best For
- Scanning large code repositories for leaked API keys and tokens
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
