Wraith

Scans GitHub, GitLab, and local repositories to uncover forgotten secrets.

Desktopfree

Wraith is an open-source tool that scans GitHub and GitLab repositories, local git history, and local filesystems for forgotten secrets and credentials. It supports configurable commit-depth scanning, file exclusions, and both web and terminal interfaces, with detection driven by a separately versioned, customizable signatures file. It's aimed at security and operations teams auditing repositories for leaked credentials.

Website

Full match profile

Behind the summary, Matchbox keeps a richer profile of Wraith - the signals our matcher actually reads to decide when to surface it. It stays private; claim the listing to see and control it.

Problem & pain-point mapping
Who we surface it to (audience fit)
What it's a strong alternative to
Trust & credibility signals

Claim Wraith to unlock →

Something wrong with this listing — dead link, not a real product, wrong info?

Try Matchbox with your own problem

Describe what is not working - we’ll show you whether Wraith (or something else) actually fits.

Try a problem