notinferred / keypaste
A KeePass-compatible password and secrets manager for people who work with AI agents.
notinferred / keypaste
gitleaks / gitleaks
Find secrets with Gitleaks 🔑
graygnatconsole / mcp-audit-tool
🛡️ Security audit CLI for Model Context Protocol (MCP) servers — scan AI agent configs for tool poisoning, rug pulls, hardcoded secrets, command injection & supply-chain risks. Pure Python, SARIF + CI ready.
aquasecurity / trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
keepassxreboot / keepassxc
KeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.
Spectrmachina / Ztrust
Zero-trust supply-chain security for open source: detects malicious & vulnerable dependencies, typosquats, leaked secrets and unsafe GitHub Actions — and pays independent researchers in shielded Zcash via a front-running-proof bounty protocol.
Infisical / infisical
Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.
openbao / openbao
OpenBao is a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.
SivaSaiKrishnaSuryadevara / docker-mcp-guardian
Security-hardened MCP server for Docker with read-only defaults, restart deny-lists, and secret redaction
trufflesecurity / trufflehog
Find, verify, and analyze leaked credentials
maxgoedjen / secretive
Protect your SSH keys with your Mac's Secure Enclave
heyderekj / slinky
Slinky keeps secrets out of files. A native Mac app for API keys, .env variables and recovery codes.
MaxHu-xuan / chat-archive-guard
Audit AI chat exports locally before sharing or migration. Find possible secrets, personal-data patterns, broken JSON/JSONL, SQLite issues, and scan gaps—without uploading the archive.
betterleaks / betterleaks
Find leaked secrets everywhere.
huzhengcai471-crypto / dsh-startup-secret
DeepSeek Harness 启动动画插件（二次创作版）：暗色赛博风格开机动画，徽章标识 + 赛博电子风人物立绘 + 访问密码功能
getsops / sops
Simple and flexible tool for managing secrets
macnative / electron-detector
Find which of your Mac apps are secretly Electron. Zero-dependency Bash scanner with sizes, versions, and native alternatives.
Infisical / agent-vault
A HTTP credential proxy and vault for AI agents like Claude Code, OpenClaw, Hermes, custom agents + harnesses, and more.
elementalsouls / Claude-OSINT
8 Claude skills · 100+ recon capabilities · 80 secret-regex patterns · 80+ dorks · 9 read-only credential validators · 27 attack-path templates · ~10,000 lines of structured tradecraft. Drop-in SKILL.md files that turn Claude into a god-mode external recon operator for authorized red-team and bug-bounty engagements.
openqodex / openqodex
Open source code review that runs in your coding agent before you push. Scanners plus a separate AI reviewer, on your own login, no key.
ankidroid / Anki-Android
AnkiDroid: Anki flashcards on Android. Your secret trick to achieve superhuman information retention.
MuzeAnisichael / GreatSage
GreatSage · 大贤者 — a Windows desktop voice secretary that listens, remembers across sessions, turns meetings and Markdown notes into cited minutes and todos, and asks before it acts. Cloud or local AI, auditable, with a desktop pet.
dmno-dev / varlock
AI-safe .env files: Schemas for agents, Secrets for humans.
hashgraph-online / hol-guard
Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.
strands-agents / box
Run AI agents in a sandbox that restricts what they can execute, read, write, and reach on the network. Box combines OS isolation with default-deny Dogwood policies and credential injection that keeps secrets outside the agent. Written in Rust. Supports macOS on Apple silicon, with Linux support planned.
golbin / rekey
Reissue an API key with one command and update it everywhere it is used (1Password + templates)
hashicorp / vault
A tool for secrets management, encryption as a service, and privileged access management
UnigramDev / Unigram
Telegram for Windows
stakater / Reloader
A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig – [✩Star] if you're using it!
jhaals / yopass
Secure sharing of secrets, passwords and files
cachix / secretspec
A declarative interface for every secret provider.
bitnami / sealed-secrets
A Kubernetes controller and tool for one-way encrypted Secrets
ray-amjad / claude-code-mods
Ray Amjad's Claude Code mods: panes, bands, prompt guards, secret handling and memory tools. One marketplace, each mod installs on its own.
Mouseww / veil
使用大模型时，隐藏你的密码、token 等敏感信息。适配市面上各种工具，一键安装即可用。 / Hide passwords, tokens and secrets from the model. Works with everyday tools — one-click install.
mvanhorn / cli-printing-press
Every API has a secret identity. This finds it, absorbs every feature from every competing tool, then builds the GOAT CLI — designed for AI agents first, with SQLite sync, offline search, and compound insight commands.
drduh / YubiKey-Guide
Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.
danog / MadelineProto
Async PHP client API for the telegram MTProto protocol
jdx / fnox
encrypted/remote secret manager
ghuntley / preflight
A local proxy that scans LLM requests and attachments for secrets before they reach the model.
onecli / onecli
Open-source sandboxed agent harness for teams. Giving every employee a secured personal agent.
Mic92 / sops-nix
Atomic secret provisioning for NixOS based on sops
nmatt0 / mithril
IoT static scanner for secrets, SBOM, CVEs and more.
cefege / harry-potter-2-chamber-of-secrets-pc
—
external-secrets / external-secrets
External Secrets Operator reads information from a third-party service like AWS Secrets Manager and automatically injects the values as Kubernetes Secrets.
AnuragRoy485 / Sleuth
Sleuth finds hardcoded secrets, API keys, tokens, private keys and high-entropy strings in your codebase fast, accurately, and with beautiful output.
pglombardo / PasswordPusher
🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.
ryantm / agenix
age-encrypted secrets for NixOS and Home manager
fwdai / rowel
🔑 Local-first Secrets Manager
dotenvx / dotenvx
a secure dotenv—from the creator of `dotenv`
onetimesecret / onetimesecret
Keep passwords and other sensitive information out of your chat logs and inboxes.
scito / extract_otp_secrets
Extract one time password (OTP) secrets from QR codes exported by two-factor authentication (2FA) apps such as "Google Authenticator". The exported QR codes from authentication apps can be captured by camera, read from images, or read from text files. The secrets can be exported to JSON or CSV, or printed as QR codes to console.
google / secrets-gradle-plugin
A Gradle plugin for providing your secrets to your Android project.
inoio / agents-sandbox
Sandbox for AI coding agents (Claude Code, opencode, pi): runs each project in an isolated microVM with host-side secret injection. Linux/KVM & macOS.
edoardottt / cariddi
Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more
kdeldycke / awesome-iam
👤 Identity and Access Management knowledge for cloud platforms
bank-vaults / bank-vaults
A Vault swiss-army knife: A CLI tool to init, unseal and configure Vault (auth methods, secret engines).
emberstack / kubernetes-reflector
Custom Kubernetes controller that can be used to replicate secrets, configmaps and certificates.
zalando / go-keyring
Cross-platform keyring interface for Go
mongodb / kingfisher
Detect secrets + live validation. Map blast radius. Revoke fast. Use the CLI or embed in Rust and Python.
sgasser / pasteguard
AI gets the context. Not your private data. Local-first privacy proxy for browser chat, AI APIs, and coding agents.