CredSweeper

Scans code, configs, and files for exposed credentials like passwords, API keys, and tokens.

Desktopfreeglobal

An open-source desktop tool that scans source code, configuration files, documents, archives, and Git commits for exposed passwords, API keys, tokens, and other secrets. It combines pattern-based rules with machine-learning validation to reduce false positives and is aimed at security engineers, developers, and DevSecOps teams that need a self-run scanner rather than a hosted service; it supports Python 3.10–3.14 and compressed/binary formats and is maintained by Samsung (MIT License).

Website

Full match profile

Behind the summary, Matchbox keeps a richer profile of CredSweeper - the signals our matcher actually reads to decide when to surface it. It stays private; claim the listing to see and control it.

Problem & pain-point mapping
Who we surface it to (audience fit)
What it's a strong alternative to
Trust & credibility signals

Claim CredSweeper to unlock →

Try Matchbox with your own problem

Describe what is not working - we’ll show you whether CredSweeper (or something else) actually fits.

Try a problem