# Kingfisher

Secret scanning & validation.

Source: [Console review](<https://console.dev/tools/kingfisher>)

Website: [https://github.com/mongodb/kingfisher](<https://github.com/mongodb/kingfisher>)

Profile updated: 2026-10-11

Category: [Secrets management](<https://console.dev/tools/categories/security-secrets-management>)

## Supported tech stack

Research checked: 2026-10-11

### SDK support

- Python (Language)
- Rust (Language)

### Integrates with

- Docker (Integration)

### Written in

- Rust (Language)

Source: [Research source](<https://github.com/mongodb/kingfisher>)

Documented compatibility; coverage may be incomplete. Written in describes implementation, not user-project language support.

Secret scanner is built in Rust, offers Rust and Python embedding, and scans Docker images.

## Console’s review — 2025-07-03

Reviewed: 2025-07-03

Author: [David Mytton](<https://console.dev/about#david-mytton>)

Citation: [This review](<https://console.dev/tools/kingfisher#review_45d9c935ce832557591f5e1e24a977cb57c022f2e9ef4df40b3e17a5bef99d39>)

### What we like

Uses hardware accelerated regex parsing combined with live validation to find secrets. Optimized with language aware parsing to check regex matches against real patterns. Can scan locally and remotely across Git histories. Includes many pattern detections out of the box. Supports writing custom rules and validators.

### Tradeoffs

No Linux packages (available as a small (\\\~14Mb) compiled Rust binary). Hardware acceleration is based on Intel features.

This review reflects Console’s assessment at publication on 2025-07-03. Features and limitations may have changed since the review date.

[Selection criteria](<https://console.dev/selection-criteria>) · [About Console](<https://console.dev/about>) · [Browse tools](<https://console.dev/tools>)