Scan codebases for LLM/AI SDK usage, exposed API tokens, and hardcoded secrets.
Install
KitScout test notes
Not tested by KitScout yet. When our harness runs it, pros, cons and the tasks we tried appear here, with the date and evidence.
Similar tools
- Klarion 11 ★
Secret scanning for AI agents: rules and entropy find candidates, a model decides which are real. - io.github.Agnuxo1/enigmagent-mcp 7 ★
Local AES-256-GCM vault for AI agents. Secrets stay local, LLMs never see real API keys. - 1Claw Vault 4 ★
HSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning. - Keyblind 3 ★
Encrypted secrets vault for AI agents. 27 MCP tools resolve secrets at runtime, never leaking them. - Secret Sentinel 3 ★
Local secret guardrails: scan code, git changes and MCP configs for API keys; redact text