Kingfisher

Open-source secret scanner with live credential validation and revocation.

Desktopfree

Kingfisher is an open-source secret scanner with live credential validation, built to find and verify leaked API keys, tokens, and credentials across code, cloud storage, chat, documents, and CI pipelines. It includes over 1,000 detection rules, a report viewer, and direct revocation support for several providers. It's aimed at security engineers and DevSecOps teams triaging exposed secrets.

Website

Full match profile

Behind the summary, Matchbox keeps a richer profile of Kingfisher - the signals our matcher actually reads to decide when to surface it. It stays private; claim the listing to see and control it.

Problem & pain-point mapping
Who we surface it to (audience fit)
What it's a strong alternative to
Trust & credibility signals

Claim Kingfisher to unlock →

Try Matchbox with your own problem

Describe what is not working - we’ll show you whether Kingfisher (or something else) actually fits.

Try a problem