Kingfisher

Secret scanning & validation.

Visit website ↗

Console’s review

· Reviewed by David Mytton

What we like

Uses hardware accelerated regex parsing combined with live validation to find secrets. Optimized with language aware parsing to check regex matches against real patterns. Can scan locally and remotely across Git histories. Includes many pattern detections out of the box. Supports writing custom rules and validators.

Tradeoffs

No Linux packages (available as a small (\~14Mb) compiled Rust binary). Hardware acceleration is based on Intel features.

Console is a free weekly newsletter with short reviews of developer tools, covering strengths and tradeoffs. This review reflects our assessment at publication. Read our selection criteria and learn about Console.

Discover your next favorite tool

Independent devtool reviews and the latest betas, in your inbox every Thursday. Free.