🔍 Gitsint is a cutting-edge OSINT platform designed for security researchers, threat intelligence teams, and developers. Uncover hidden connections, detect exposed secrets, and map digital footprints across GitHub's vast ecosystem.

Some useful functionality to detect secrets

Security Command Center for Model Context Protocol (MCP) servers. Detect prompt injection, tool poisoning, secrets, and vulnerabilities. The Trivy of MCP security.

Security and cleanup toolkit for Claude Code. Auto secret detection, 99.4% config reduction. CLI & MCP Server.

Secrets scanner with pattern matching, entropy analysis, and live validation

CLI security scanner for detecting secrets and vulnerabilities in codebases

Git secrets, vulnurabilities scanner with rich reporting

Fast Python static analysis powered by Rust. Detects dead code, security issues (including taint analysis), and code quality metrics like complexity, Halstead, maintainability, and nesting depth.

Advanced secret detection and remediation system - 79 API patterns, 8 verification methods

A Python-based security tool that recursively scans directories to detect hardcoded passwords and exposed email addresses using regex pattern matching.

Local-first clipboard secret masking for VS Code/Cursor.

MLSecOps pipeline tool for automated security scanning, policy enforcement, and compliance reporting

Safe-Paste is a developer-focused tool that ensures you never leak sensitive information when sharing code. It scans your pasted content for secrets, tokens, credentials, and confidential values, then redacts or replaces them with safe placeholders. Ideal for AI prompts, documentation, issue reports, and public chats.

Advanced Client-Side Static Analysis Tool (SAST) with Shannon Entropy & Heuristic Logic.

Claude Code skills: auto-detect & start any app, README generator, Docker Hub push, LinkedIn posts, NotebookLM slides, secret scanner, mobile responsiveness testing | Install with npx skills add

Lightweight, DevSecOps-friendly secret scanner with SARIF & Pre-commit support. Detects API keys, tokens, and passwords with entropy analysis.

Sensitive data scanner — deterministic detection and obfuscation for text content

Automated secrets detection and PR blocking for secure development workflows.

Multi-purpose security scanner for source code, container images. Supports OSV.dev + EPSS scoring.