SecretSentry

SecretSentry is a web app (with a lightweight CLI) that continuously tests whether your organization is accidentally exposing secrets—API keys, tokens, private keys, OAuth client secrets—across code, build logs, artifacts, container images, and internal docs. It runs scheduled scans and PR checks, then validates findings with safe “canary” verification (where possible) to reduce false positives that waste security time. The product focuses on fast remediation: it opens actionable pull requests with precise file/line context, suggests rotation steps per provider, and tracks mean-time-to-revoke. It integrates with GitHub/GitLab, popular CI systems, and cloud secret managers to confirm when a secret is actually rotated. This is not a magic AI pentester; it’s a pragmatic security testing tool that makes secret exposure measurable, repeatable, and harder to ignore.