DeepSource From $2/mo · Free plan 9.3 Visit scan4secrets
scan4secrets.m14r41.in
Spec sheet
- Purpose
- The tool scans source trees, running web apps, and CI logs for leaked credentials, code vulnerabilities, and misconfigurations.Read 5 Oct 2026 · scan4secrets.m14r41.in
- Intended users
- The maker describes the tool as complementary to gitleaks for teams scanning live staging or production systems alongside source code.Read 5 Oct 2026 · scan4secrets.m14r41.in
- License
- The project is MIT licensed.Read 5 Oct 2026 · scan4secrets.m14r41.in
- Authenticated scans
- Authenticated DAST supports cookies, headers, and Burp or ZAP proxies.Read 5 Oct 2026 · scan4secrets.m14r41.in
- CI integrations
- The maker documents integration examples for pre-commit, GitHub Actions, GitLab CI, Jenkins, and Docker in CI.Read 5 Oct 2026 · scan4secrets.m14r41.in
- DAST
- Its web crawler parses JavaScript source maps, extracts endpoints, and scans response headers.Read 5 Oct 2026 · scan4secrets.m14r41.in
- Live verification
- An optional verification mode probes vendor APIs to check whether detected tokens are live.Read 5 Oct 2026 · scan4secrets.m14r41.in
- Performance limits
- The architecture page gives a default maximum file size of 10 MB and maximum line length of 4096 characters.Read 5 Oct 2026 · scan4secrets.m14r41.in
- Report masking
- Secret values appear in full by default, and the maker recommends using --mask before uploading reports to shared artifact stores.Read 5 Oct 2026 · scan4secrets.m14r41.in
- Reports
- Output formats include SARIF, JSON, JSONL, CSV, HTML, Excel, and PDF.Read 5 Oct 2026 · scan4secrets.m14r41.in
- Rule coverage
- It lists 416 rules: 193 secret rules and 223 vulnerability or misconfiguration rules.Read 5 Oct 2026 · scan4secrets.m14r41.in
- Rule customization
- Users can add secret and vulnerability rules by editing YAML files without changing code.Read 5 Oct 2026 · scan4secrets.m14r41.in
- Vulnerability coverage
- The SAST engine detects issues including injection, SSRF, XSS, weak cryptography, JWT flaws, and infrastructure configuration problems.Read 5 Oct 2026 · scan4secrets.m14r41.in
Plans and prices
MIT-licensed open-source CLI Free MIT License · source, pipx, and Docker installation Read 5 Oct 2026 · scan4secrets.m14r41.in
Where Specifiction places it
- Secrets Scanning Software#19 of 247.3
Alternatives to scan4secretsAll alternatives →
DeepSource From $2/mo · Free plan 9.3 Visit 
Endor Labs Free plan 8.8 Visit 
Arnica Secrets Security From $25/mo · Free plan 8.4 Visit 
ggshield Free plan 8.1 Visit 
Vooda AI Free plan 8.1 Visit 
GitGuardian Free plan 8.0 Visit