Secrets management

Agent Vault is an open-source HTTP credential proxy and vault designed to prevent credential exfiltration from AI agents through prompt injection...

Betterleaks is a configurable secrets scanner for detecting exposed credentials across Git repositories, cloud storage, and collaboration platforms....

Kingfisher is a high-performance secret detection and validation tool built in Rust, designed specifically for detecting leaked credentials, API...

Infisical is an open-source secrets and certificate management platform designed for teams to centralize, sync, and rotate secrets across...

dotenvx is a secure, multi-environment configuration manager that extends the original dotenv library with encryption and cross-platform CLI...

ggshield is a specialized secrets detection CLI that scans for 500+ types of hardcoded credentials and API keys in code. It integrates into...

helm-secrets is a Helm plugin that encrypts and decrypts value files using SOPS, enabling secure secret management integrated with Git workflows. It...

OWASP WrongSecrets is a deliberately vulnerable Java web application designed as a training tool for learning secrets management security. It...

Berglas is a command-line tool and Go library for encrypting, storing, and retrieving secrets on Google Cloud Platform using Cloud KMS and Cloud...