Security tools for AI-built apps
Catch leaked keys, vulnerable dependencies and attacks before users do. 4 options, each with its free plan and the catch.
Every security option
GitHub Secret Scanning Push Protection
Blocks git pushes that contain recognized secrets (API keys, tokens, private keys) before they land in your repository.
Free Push protection for users is on by default for every GitHub.com accountGitleaks
An open-source command-line tool that scans git repositories, files and history for hardcoded secrets. Can run locally, as a pre-commit hook or in CI.
Free Open source and free to run Snyk
Scans your dependencies (SCA), source code (SAST), infrastructure-as-code and containers for known vulnerabilities, with IDE, CLI and Git integrations.
Free Free plan for individual developers and small teams Cloudflare (Free plan)
Put Cloudflare's proxy and DNS in front of your domain for DDoS mitigation, a CDN and a free SSL certificate, whichever host you use.
Free DDoS mitigation and global CDNFree tiers side by side
The first two lines of each free plan, and the price where paid plans start.
| Tool | Free plan | Paid from |
|---|---|---|
| GitHub Secret Scanning Push Protection | Push protection for users is on by default for every GitHub.com account; Stops you from pushing supported secrets to public repositories | See the pricing page |
| Gitleaks | Open source and free to run | See the pricing page |
| Snyk | Free plan for individual developers and small teams; Test limits: 200 Open Source, 100 Code, 300 IaC and 100 Container tests | Team: $25/month |
| Cloudflare (Free plan) | DDoS mitigation and global CDN; Free shared SSL certificate | See the pricing page |