leakferret

MCP-native secret scanner in one fast Rust binary: engine, CLI, and MCP server. Finds API keys and secrets, skips known-public fixtures, verifies live keys with a real provider call, and applies env-var rewrites. Privacy invariant: the raw secret never leaves disk. (by leakferrethq)

Leakferret Alternatives

Similar projects and alternatives to leakferret based on common topics and language

  1. security-harness-kit

    A Rust CLI that scans for secrets, PII, and sensitive data — with native hooks for AI coding assistants to prevent leaking credentials into AI context.

  2. SaaSHub

    SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

    SaaSHub logo
  3. hasp

    Paranoid security scanner + sandboxed step runner for GitHub Actions. Verifies pins, audits workflows, runs steps in a kernel sandbox where secrets are capabilities.

  4. aegis

    Supply-chain security scanner for npm packages. Detect malicious code, typosquatting, and compromised dependencies before you install them. (by z8run)

  5. foxguard

    Discontinued Linter-fast security scanning and policy checks for catching regressions before deploy. [Moved to: https://github.com/PwnKit-Labs/foxguard]

  6. forge-orchestrator

    Forge Orchestrator: Multi-AI task orchestration. File locking, knowledge capture, drift detection. Rust.

  7. noseyparker

    Discontinued Nosey Parker is a command-line tool that finds secrets and sensitive information in textual data and Git history.

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a better leakferret alternative or higher similarity.

leakferret discussion

Log in or Post with

leakferret reviews and mentions

Posts with mentions or reviews of leakferret. We have used some of these posts to build our list of alternatives and similar projects.
  • Secret scanning for the agent era: verify the leak, then fix it
    1 project | dev.to | 31 May 2026
    leakferret is a secret scanner written for that situation. It is a single Rust binary that runs as a CLI in CI and as an MCP server that an agent can call on its own work before it commits. It checks findings against the real provider, it keeps the raw secret on your machine, and it can apply the fix by replacing the hardcoded value with an environment variable lookup. This post explains how each of those parts works and how to wire it into both a CI pipeline and an agent loop. It is open source under MIT and free to use.

Stats

Basic leakferret repo stats
1
0
-
3 months ago

leakferrethq/leakferret is an open source project licensed under MIT License which is an OSI approved license.

The primary programming language of leakferret is Rust.


Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com

Did you know that Rust is
the 3rd most popular programming language
based on number of references?