Skip to content
SecArsenal
Educational and ethical use only. Only test systems you own or are explicitly authorized to test. Full disclaimer.

gitleaks

Protect and discover secrets using Gitleaks ๐Ÿ”‘ (program)

uncategorizedRed Team
Official docs โ†—Download โ†—Source repo โ†—

Platforms: Linux ยท Last verified September 6, 2026

Gitleaks is a SAST tool for detecting and preventing hardcoded secrets like passwords, API keys, and tokens in git repos. Gitleaks is an easy-to-use, all-in-one solution for detecting secrets, past or present, in your code.

Only use this tool against systems you own or are explicitly authorized to test โ€” see the disclaimer.

Getting started

See the official Kali tool page and upstream homepage linked above for installation and usage details.

Commonly preinstalled on

Kali Linux

Debian-based distribution built for penetration testing and security auditing