KeyHog vs Vooda AI

KeyHog is free, open-source Rust software for finding and verifying exposed API keys, tokens, passwords, and other credentials. It scans source repositories and Git history, archives, Docker images, URLs and HAR captures, collaboration content, VCS inventories, cloud-storage inventories, browser assets, and running systems. The project lists 934 service-specific detectors, decode-before-scanning, contextual evidence and suppression, and optional live provider verification. GPU execution can use CUDA, native Metal, or portable WGPU, with calibration selecting a parity-backed option. Its GitHub Action scans checked-out trees, fails on high or critical findings, uploads SARIF to Code Scanning, and retains a workflow artifact. Documented CI integrations include GitLab, CircleCI, Jenkins, Buildkite, and shell jobs. A Unix daemon checks changed repository blobs before commits; Windows uses in-process scanning. KeyHog runs on Linux, macOS, Windows, and self-hosted deployments, and requires Rust 1.89 or newer. Code and detector TOMLs are licensed MIT OR Apache-2.0. The plan costs nothing.

Vooda AI is a secrets-detection platform that searches a technology stack for exposed credentials, API keys, and sensitive data. It checks whether credentials are still live and identifies resources they can access. Its detection combines 942 provider-specific rules with entropy analysis, base64 decoding, structured-file parsing, configuration checks, and custom detectors. Vooda scans full Git history and more than 23 non-code sources, including collaboration tools, cloud storage, containers, Postman, and CI/CD logs. It verifies credentials against more than 250 provider APIs; AI confidence scores, team decisions, and false-positive suppression help triage findings. Vooda Radar maps access to repositories, buckets, databases, and IAM policies and assigns an impact score from 0 to 100. Remediation includes provider-specific rotation playbooks and pre-filled pull requests. CI/CD options include GitHub and GitLab templates, container images, pre-commit scanning, and gating. Vooda supports cloud and self-hosted deployment, including air-gapped use with a local AI model and outbound verification disabled. The self-hosted plan is free.