AquilaX Secret Scanner scans every commit, branch, and file for API keys, passwords, tokens, SSH keys, and cloud credentials — with entropy analysis and AI context validation to eliminate false alarms. Free on every plan.
From AWS keys to custom internal tokens — AquilaX recognises over 400 distinct secret patterns, with entropy analysis for unknown formats.
AWS access keys and secret keys, GCP service account JSON, Azure client secrets, DigitalOcean tokens, and Cloudflare API keys — all detected with provider-specific pattern matching.
Stripe live/test keys, Twilio auth tokens, SendGrid API keys, Slack bot tokens, GitHub personal access tokens, and hundreds of other SaaS platform credentials.
Private RSA, EC, and DSA keys, PEM-encoded certificates, PKCS#12 keystores, and SSH host key pairs — detected even when base64-encoded or embedded in configuration files.
Connection strings containing passwords for PostgreSQL, MySQL, MongoDB, Redis, Elasticsearch, and others — in .env files, config files, Kubernetes secrets, and Helm values.
JSON Web Tokens with weak signing keys, bearer tokens, OAuth client secrets, and custom authentication tokens — with entropy-based detection for formats without known patterns.
Secrets committed and then deleted are still in your git history. AquilaX scans the full commit history — not just the current branch — to surface secrets that were thought to be removed.
Secret scanning is available on the free plan — because no team should ship with leaked credentials.
Start protecting your repos in 60 seconds with the free plan. No credit card, no configuration. AquilaX scans every commit automatically — even on private repos.
Set custom secret patterns for internal tokens. Configure notification webhooks for Slack, PagerDuty, or JIRA. Get alerts the moment a secret enters any monitored repository.
Meet PCI DSS Requirement 6.4.3 and ISO 27001 A.9.4. Auto-generate audit evidence reports showing secret scanning coverage across your entire codebase.
Connect your repo in 60 seconds. Secret scanning is free on every plan — forever. No credit card required.