Kingfisher
lastmod 2025-07-19created 2025-07-191 edits
Ultra-fast real-time secret detection and validation tool
About
- An ultra-fast secret (sensitive information) scanning and validation tool built with Rust
- Ultra-fast scanning of large codebases based on multithreading and the Intel Hyperscan regular expression engine
- Supports AST parsing of 20+ languages with Tree-Sitter, minimizing false positives from simple regular expressions
- Provides hundreds of built-in detection rules and real-time secret validation by calling real cloud APIs (e.g. AWS, Azure, GCP, Stripe), and custom rules can be easily added in YAML
- Supports various repositories such as GitHub and GitLab, as well as Git history
- Supports live updates, automatically checking for new versions and self-updating without downtime
- A fork based on Praetorian Security's open-source project Nosey Parker, with various enhancements such as live validation, Windows support, and language parsing
- From development to production, detects and blocks leaked secrets early, helping prevent security incidents, reduce compliance costs, and minimize business disruption