Gitleaks free tier and limits
An open-source command-line tool that scans git repositories, files and history for hardcoded secrets. Can run locally, as a pre-commit hook or in CI.
What the free plan gives you
- Open source and free to run
Best for
Scanning a vibe-coded repo's full history before you make it public.
Watch out
A finding means the key may already be exposed. Rotate it at the provider; deleting it from the latest commit is not enough.
Fix guides that use Gitleaks
Other security options
GitHub Secret Scanning Push Protection
Blocks git pushes that contain recognized secrets (API keys, tokens, private keys) before they land in your repository.
Free Push protection for users is on by default for every GitHub.com account
Snyk
Scans your dependencies (SCA), source code (SAST), infrastructure-as-code and containers for known vulnerabilities, with IDE, CLI and Git integrations.
Free Free plan for individual developers and small teams
Cloudflare (Free plan)
Put Cloudflare's proxy and DNS in front of your domain for DDoS mitigation, a CDN and a free SSL certificate, whichever host you use.
Free DDoS mitigation and global CDN