Dev tools · alternatives · 2026
24 alternatives to Nosey Parker, a fast and low-noise secrets detector for textual data
Nosey Parker is an Apache-licensed command-line tool that finds secrets and sensitive information in textual data. It's useful both for offensive and defensive security testing. The big idea: textual content in, hardcoded secrets out. These include things like API keys and passwords. It should do a reasonable job on any textual input. It will recursively scan any directories it is pointed at. It also has special support for scanning the complete contents of Git repositories. The default rules in Nosey Parker have been carefully chosen to minimize false positives. Many API tokens these days…
Nosey Parker is an Apache-licensed command-line tool that scans textual data to find hardcoded secrets like API keys and passwords. It recursively searches directories and has special support for Git repositories.… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Nosey Parker, a fast and low-noise secrets detector for textual data launched in 2023; newer entries below may have overtaken it.
- 1
Win clients faster than ever
2024 · sniff.so · its alternatives →
- 2
Your ultimate AI-powered ethical hacking assistant
2023 · copilot.bugbase.ai · its alternatives →
- 3
- 4IB
2024 · securelog.com · its alternatives →
- 5
- 6
0github.com is a pull request viewer that color-codes every diff line/token by how much human attention it probably needs. Unlike PR-review bots, we try to flag not just by "is it a bug?" but by "is it worth a second look?" (examples: hard-coded secret, weird crypto mode, gnarly logic, ugly code). To try it, replace github.com with 0github.com in any pull-request URL. Under the hood, we split the PR into individual files, and for each file, we ask an LLM to annotate each line with a data structure that we parse into a colored heatmap. Examples:…
Oct 2025 · 0github.com · its alternatives →
- 7
GitGuardian▲132Detect secrets in source code, public and private!
2018 · gitguardian.com · its alternatives →
- 8GA
CLI tool for managing your git hooks
2025 · ezpieco.github.io · its alternatives →
- 9GM
2017 · gitmonkey.io · its alternatives →
- 10
Sequirly▲129Prevent accidental data leaks while using AI tools
Mar 2026 · sequirly.com · its alternatives →
- 11
Finally open sourced an internal tool we've been using for managing secrets. It's similar to SOPS, but more opinionated, easier to configure/use correctly, and produces nicer git diffs. It also supports one-way encryption, so you don't have to know the private key to add secrets.
2023 · github.com · its alternatives →
- 12
Hi! I got tired of setting up tools I can't explain to a team in a few words like sops or git-crypt, just to store few files with environment variables or secrets, so I built lockenv as a simple alternative. It's basically a password-protected vault file you commit to git. No gpg keys, no cloud, just lockenv init, set a password, and lock/unlock the secrets. This tool integrates with OS keyring, so you're not typing passwords constantly. Should work on Mac/Linux/Windows, but I tested it only on linux so far. I am not trying to replace any mature / robust solution, just…
Dec 2025 · github.com · its alternatives →
- 13
hey guys, wanted to show one of my side projects i just made public. the idea is basically another osint tool for pentesters and bug bounty hunters. it watches certificate transparency logs and checks newly-seen domains for exposed stuff like .env files, open .git dirs, config files, db dumps and so on, and puts whatever it finds into a searchable db. you just search a domain (or part of one) and see what's exposed. it's read-only and free. one thing i've been thinking about adding is a way to register for certain keywords and get notified when something new shows up for that search. would…
Jul 2026 · search.cerast-intelligence.com · its alternatives →
- 14
2016 · zemanta.github.io · its alternatives →
- 15
AroCrypt▲127Encrypt files, then make them vanish inside images
2025 · arocrypt.vercel.app · its alternatives →
- 16
- 17
I built this after seeing multiple teams accidentally ship API keys in their frontend code. The problem: Modern web development moves fast. You're vibe-coding, shipping features, and suddenly your AWS keys are sitting in a tag visible to anyone who opens DevTools. I've personally witnessed this happen to at least 3-4 production apps in the past year alone. KeyLeak Detector runs through your site (headless browser + network interception) and checks for 50+ types of leaked secrets: AWS/Google keys, Stripe tokens, database connection strings, LLM API keys (OpenAI, Claude, etc.), JWT…
Nov 2025 · github.com · its alternatives →
- 18
Perceptual hashing tools for detecting child sexual abuse material - thorn-oss/perception
2019 · github.com · its alternatives →
- 19
Dastardly▲57A lightweight web app security scanner for your CI pipelines
2022 · portswigger.net · its alternatives →
- 20
Contribute to fmeringdal/covert development by creating an account on GitHub.
2023 · github.com · its alternatives →
- 21
🔐 Share end-to-end encrypted secrets with others via a one-time URL - sniptt-official/ots
2021 · github.com · its alternatives →
- 22
Stasher is a tiny CLI tool that lets you share encrypted secrets that burn after reading — no accounts, no logins, no servers to trust. I built it because I just wanted to share a password. Not spin up infra. Not register for some "secure" web app. Not trust Slack threads. Just send a secret. Secrets are encrypted client-side with AES-256-GCM. You get a `uuid:key` token to share. Once someone reads it, it's gone. If they don't read it in 10 minutes, it expires and deleted. Everything is verifiable. Every release is signed, SLSA-attested, SBOM-included, and logged in the Rekor transparency…
2025 · github.com · its alternatives →
- 23AC
Anti-Cluely is a lightweight tool designed to detect common virtual environments, device emulators, and system manipulation tools often used to bypass or cheat in online exams.
2025 · anti-cluely.com · its alternatives →
- 24
PryingDeep is a dark web OSINT tool. It specializes in extracting information depending on modules chosen. Here's an overview of the features: - Email, PhoneNumber, Wordpress search - PGP keys, Certificates and 3 different cryptocurrencies (XMR,BTC,ETH) search - PostgreSQL database, docker container for Tor and docker-compose for the whole project - A built in exporter, currently only JSON, but possibly more. - Exporter has support for: offset, limit, query building via the command line, raw-sql and different modules you can specify, e.g you only want emails, you will only get emails and the…
2023 · github.com · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →