Skip to main content

29 posts tagged with "secrets-detection"

View All Tags

Detection Engine Updates Version 2.159

calendar icon   Release Date: March 20, 2026

This release introduces 19 new detectors and checkers including Azure, DeepL, Oracle, SAP, and Polar tokens, 4 new analyzers, and improved detection precision and checker reliability across multiple existing secrets.

Notable Detection Changes​

Starting with this release, we'll highlight notable detector changes that may affect your scan results. In this release, all detectors remain stable - you can expect minimal changes to detection accuracy. Future releases with significant changes will be called out here.

New Detectors and Checkers​

New Detectors​

New Analyzers​

Detector Upgrades​

Checker Upgrades​

Analyzer Upgrades​

  • GitLab Token: The gitlab_token analyzer now includes more info about the token, and if available, about the token owner.
  • PostgreSQL Credentials: Handle connection timeout errors gracefully with a proper AnalyzerFailed exception

Detection Engine Updates Version 2.158

calendar icon   Release Date: March 03, 2026

This release introduces 4 new detectors for MiniMax, Retell, Azure Storage Account Key, and curl credentials, along with a 12% scanning speed improvement.

New Detectors and Checkers​

New Detectors​

Detector Improvements​

Engine Enhancements​

  • Scanning speed improved by 12% as a result of optimizations to the scanner's internal logic.

Detection Engine Updates Version 2.157

calendar icon   Release Date: February 19, 2026

Engine Performance​

This new version nearly doubles scanning speed, meaning significantly reduced scan times. Self-hosted customers will also benefit from lower resource consumption.

This release also introduces a significant expansion of detection capabilities with over 20 new detectors, particularly for Azure cloud services and payment platforms, along with new revokers and analyzer upgrades.

New Detectors and Checkers​

New Detectors​

Detector Improvements​

New Analyzers​

Analyzer Upgrades​

  • PostgreSQL Credentials: The analyzer now properly reports the error message instead of raising an unexpected error upon access denied for database.
  • SendGrid Key: The analyzer now properly reports when no scopes are found.

New Revokers​

Detection Engine Updates Version 2.156

calendar icon   Release Date: January 29, 2026

This release adds 7 new detectors for AI, cloud, and communication platforms including Modelscope, Deepgram, and ZegoCloud, along with enhanced Azure SAS URL detection.

New Detectors and Checkers​

New Detectors​

Detector Improvements​

Analyzer Upgrades​

  • Azure SAS URL: The azure_sas_url checker now verifies the expiration date of SAS tokens.

Detection Engine Updates Version 2.155

calendar icon   Release Date: January 12, 2026

This release introduces 18+ new detectors covering cloud platforms, databases, and DevOps tools.

New Detectors and Checkers​

New Detectors​

Detector Improvements​

Analyzer Upgrades​

  • Auth0 Keys: The auth0_keys analyzer now surfaces a wider range of error messages.
  • Auth0 Keys: Report 404 status code as invalid for auth0_keys checker.
  • Cohere API Key: Updated cohere_apikey checker to call a valid endpoint. The previous endpoint has been deprecated and removed.

Detection Engine Updates Version 2.154

calendar icon   Release Date: December 15, 2025

This release introduces new detectors for Cloudflare R2 and Azure SAS URL, significant improvements to multiple detectors.

New Detectors and Checkers​

New Checkers​

Detector Improvements​

Miscellaneous​

  • Added support for 378 new secret providers for improved incident prioritization on generic secrets.

Detection Engine Updates Version 2.153

calendar icon   Release Date: December 5, 2025

This release introduces 6 new detectors with comprehensive coverage for cloud services and databases and support for 883 new secret providers.

New Detectors and Checkers​

New Checkers​

Detector Improvements​

  • Cloudflare API Credentials: Updated checker to work with multiple types of tokens.
  • MySQL Credentials: Enhanced recall of MySQL Assignment detector by removing the constraint on the prefix.
  • GitLab Token: Updated gitlab_personal_token_v2 to cover new patterns.
  • Fireworks AI API Key: Updated detector regex to improve recall.
  • JSON Web Token: Fixed detector crashing if the expiration date was set to "inf".
  • SSH Credentials: Updated SSH password detector to use an AggregateMatcher instead of explicitly listing multiple matchers.
  • Duo Keys: Updated detector to use an AggregateMatcher instead of explicitly listing multiple matchers.
  • Azure Event Grid Access Key: Updated Azure Event Grid Access Key With Host detector to use an AggregateMatcher instead of explicitly listing multiple matchers.

Analyzer Upgrades​

  • AWS IAM: Removed aws_iam analyzer as AWS IAM scope analysis is now performed by NHI integration with AWS.

Miscellaneous​

  • Added support for 883 new secret providers for improved incident prioritization on generic secrets.

Detection Engine Updates Version 2.152

calendar icon   Release Date: November 18, 2025

This release adds a new Google Cloud Access Token detector and checker, along with improvements to Hashicorp Vault, PagerDuty, Docker, and FullStory detectors.

New Detectors and Checkers​

Detector Improvements​

Analyzer Upgrades​

Detection Engine Updates Version 2.151

calendar icon   Release Date: November 10, 2025

This release introduces 13 new detectors covering AI services (Hume AI, Azure AI Face, AssemblyAI), cloud platforms (AWS Bedrock, Grafbase), and databases (Neon), plus improvements to Kubernetes, Pinecone, and Discord detectors.

New Detectors and Checkers​

Detector Improvements​

Analyzer Upgrades​

Detection Engine Updates Version 2.150

calendar icon   Release Date: October 21, 2025

This release adds a new Coveo API Key detector, improvements to Resend and DigitalOcean detectors, and fixes proxy support for HTTP checkers.

New Detectors and Checkers​

  • Coveo API Key: Added a detector and checker for Coveo API keys.

Detector Improvements​

Analyzer Upgrades​

Engine Enhancements​

  • Fixed proxy support for HTTP checkers.

Detection Engine Updates Version 2.149

calendar icon   Release Date: October 10, 2025

This release introduces new detectors for Comet, Langfuse, and Okta credentials, plus improvements to MySQL and PostgreSQL analyzers.

New Detectors and Checkers​

Detector Improvements​

Analyzer Upgrades​

  • MySQL Credentials: The secret-analyzer now uses pymysql instead of mysql-connector-python for lighter weight implementation.
  • PostgreSQL Credentials: Fixed failure in the analyzer when roles have quotes around them.

Miscellaneous​

  • Improved GitHub classic analyzer for GitHub Enterprise that was using an old logic.

Detection Engine Updates Version 2.148

calendar icon   Release Date: September 22, 2025

This release brings a major expansion with 16+ new detectors covering AI services (VirusTotal, Stability AI, Dify, Llama Cloud), cloud platforms (Cloudflare, AWS Cognito, Azure Cosmos DB), and DevOps tools (GitLab, Artifactory, Kubernetes).

New Detectors​

New or Updated Checkers​

  • Various new and updated checkers accompany the new detectors, including host-specific and project-id aware checkers, improving verification and reducing false positives. See each detector for the exact checker entries.

Detection Engine Updates Version 2.147

calendar icon   Release Date: September 15, 2025

This release adds new detectors for Weaviate and Cursor API keys, enhanced Snowflake validation support, and improvements to JWT handling and Google API key validation.

New Detectors​

New Checkers​

Detector Improvements​

Detection Engine Updates Version 2.146

calendar icon   Release Date: August 27, 2025

This release introduces new detectors and checkers for various API keys, enhancements to existing detection capabilities, and improvements to documentation and testing processes.

New Detectors​

  • Africa's Talking API Key – Africa's Talking provides SMS, voice, and payment APIs for businesses in Africa.
  • Clipdrop API Key – Clipdrop offers AI-powered image editing and enhancement tools.
  • StackHawk API Key – StackHawk enables automated application security testing for developers.
  • Murf API Key – Murf provides AI voice generation and text-to-speech services.

Detector Improvements​

  • Stripe Keys – Updated Stripe checker to prevent timeouts during checks.

Detection Engine Updates Version 2.144

calendar icon   Release Date: July 25, 2025

This release introduces new detectors for Weights & Biases API keys and Mercado Pago access tokens, along with significant improvements to existing detectors including Azure subscription keys and Bitbucket access tokens.

New Detectors​

New Checkers​

These checkers are implemented to verify the detected secrets, adding another layer of security and ensuring their validity and correct application:

  • Mercado Pago Access Token

Detector Improvements​

Detection Engine Updates Version 2.143

calendar icon   Release Date: July 15, 2025

This release introduces new detectors for GitLab incoming mail tokens, Coze personal access tokens, Tavus API keys, and more. It also includes significant improvements to existing detectors and analyzers, such as those for Zendesk, Sendinblue, and Algolia, enhancing detection accuracy and performance.

New Detectors​

New Checkers​

These checkers are implemented to verify the detected secrets, adding another layer of security and ensuring their validity and correct application:

  • Coze Personal Access Token
  • Tavus API Key
  • Heroku Platform Key
  • Tableau Cloud PAT
  • Notion Integration Token v2
  • Salesforce OAuth2

Detector Improvements​

Engine Enhancements​

  • All JWT detectors will now only catch signed JWTs, enhancing security.

Detection Engine Updates Version 2.142

calendar icon   Release Date: July 2, 2025

This release introduces new detectors for AI71 and AMP API tokens, along with significant improvements to existing detectors and analyzers, such as those for GitHub, Slack, and DigitalOcean, enhancing detection accuracy and performance.

New Detectors​

New Checkers​

These checkers are implemented to verify the detected secrets, adding another layer of security and ensuring their validity and correct application:

  • AI71 API Key
  • AMP API Token

Detector Improvements​

Detection Engine Updates Version 2.141

calendar icon   Release Date: June 16, 2025

This release introduces several new detectors for Kubernetes user certificates, NVIDIA API keys, and various other services such as Alchemy, OpenRouter, and Duffel. We've also made improvements to existing detectors for enhanced detection accuracy and reduced false positives.

New Detectors​

New Checkers​

These checkers are implemented to verify the detected secrets, adding another layer of security and ensuring their validity and correct application:

  • Kubernetes User Certificate with Port
  • Alchemy API Key v2
  • OpenRouter API Key
  • Duffel API Key
  • Apify Token
  • Jina API Key
  • Deno Account Token
  • Resend API Key
  • VKontakte Access Token
  • Fireworks AI API Key

Detector Improvements​

Detection Engine Updates Version 2.140

calendar icon   Release Date: June 10, 2025

This release adds 12 new detectors covering GitLab tokens, Kubernetes JWTs, Laravel encryption keys, and API keys for AI services like Dify, Firecrawl, and Llama Cloud. We've also enhanced existing detectors for Ubidots, Azure Cosmos DB, GitLab tokens, and ODBC connections to improve accuracy and reduce false positives.

New Detectors​

New Checkers​

These checkers are implemented to verify the detected secrets, adding another layer of security and ensuring their validity and correct application:

  • Laravel Encryption Key with Host
  • GitLab Feature Flags Client Token with Project ID
  • Kubernetes JWT with Host
  • Brave Search API Key
  • Firecrawl API Key
  • Dify API Key
  • GitLab Runner Authentication Token

Detector Improvements​

Engine Enhancements​

  • Expanded detection pattern list for encrypted strings to increase precision.
  • Enhanced AssignmentRegexMatcher for N prefixed strings in SQL, supporting Microsoft SQL Server.

Detection Engine Updates Version 2.139

calendar icon   Release Date: May 29, 2025

In our latest release, we have focused on refining our detection capabilities and introducing new tools to enhance the security of your digital assets. This update includes a new detector for GitLab feature flags tokens, along with significant improvements to existing detectors for AMQP credentials, Confluent keys, and Azure services.

New Detectors​

  • GitLab Feature Flags Client Token – Detects tokens used for managing feature flags in GitLab projects, crucial for controlling feature rollouts and ensuring smooth deployment processes.

Detector Improvements​

  • AMQP Credentials – Detector Upgrade: Enhanced multimatch selection to reduce false positive combinations, vital for secure message queuing in distributed systems.
  • Confluent Keys – Detector Upgrade: Improved multimatch selection for better accuracy and fewer false positives, essential for managing access to Kafka clusters.
  • Generic High Entropy Secret – Detector Upgrade: Excludes secrets ending with '.certificate' from being reported, reducing noise by ignoring non-sensitive certificates.
  • Artifactory Token – Analyzer Upgrade: Improved stability by preventing crashes when analyzing secrets with multiple scopes, key for managing and securing software artifacts.
  • Microsoft Azure Storage Connection String – Checker Upgrade: Enhanced to accept additional fields, crucial for accessing and managing Azure storage resources securely.
  • Microsoft Azure Storage Account Key – Detector Upgrade: Increased precision, reducing false positives, critical for safeguarding data in cloud storage.

Miscellaneous​

  • Established a priority rule favoring the confluent_api_keys detector over amqp_assignment and amqp_assignment_attached_port detectors.

Detection Engine Updates Version 2.138

calendar icon   Release Date: May 20, 2025

In this release, we've focused on improving detection capabilities for Azure services, given their importance in cloud infrastructure. By introducing new detectors for Azure Entra ID tokens, Communication Services, and App Configuration connection strings, we aim to strengthen the protection of sensitive Azure credentials. These enhancements are essential for maintaining robust security, enabling organizations to use Azure's features safely.

New Detectors​

Detector Improvements​

  • Microsoft Azure Storage Connection String – Detector Upgrade: Improved regex precision for more accurate detection.
  • ODBC Connection String – Detector Upgrade: Enhanced regex precision to better identify ODBC connection strings.
  • Jira Token – Detector Upgrade: Corrected host regex to accurately match ports.
  • SMB Credentials – Detector Upgrade: Now allows percent sign as a separator between username and password in host matches.
  • Octopus API Key – Checker Upgrade: Updated to use the correct API endpoint, resolving issues with secret validity checks.

Detection Engine Updates Version 2.136 + 2.137

calendar icon   Release Date: April 29, 2025

As AI adoption accelerates across organizations, securing API keys for platforms like Perplexity AI and Anthropic becomes increasingly critical. This update introduces specialized detectors for these emerging AI services alongside improvements to existing detectors and Azure cloud components.

New Detectors​

Detector Improvements​

  • LDAP Credentials – Checker Upgrade: Improved the LDAP checker to better distinguish between connection errors and invalid credentials. Updated ldap_credentials_assignment_with_dn to remove false positives.
  • JSON Web Token – Detector Upgrade: The detector will now detect all JWTs regardless of their contents.
  • Cloudinary API Keys – Detector Upgrade: Extended charset of cloudinary_api_key_config to improve recall.
  • Auth0 Keys – Detector Upgrade: Improved recall of the detector to detect more domains.
  • Claude API Key – Detector Upgrade: Refined regex for Claude API keys.
  • Riot Games API Key – Checker Updated: Banlist checker will be deleted.
  • LINE Notify Token – Checker Updated: Banlist checker as the service has been discontinued.

Detection Engine Updates Version 2.135

calendar icon   Release Date: April 14, 2025

We're enhancing our engine with a major focus on Artifactory secret detection. Artifactory is a critical artifact repository manager used by thousands of organizations to store, manage, and distribute software packages and dependencies. Compromised Artifactory credentials can lead to supply chain attacks, allowing attackers to poison software dependencies or access proprietary code.

Multiple new detectors have been added for Artifactory:​

Detector Improvements​

Detection Engine Updates Version 2.134

calendar icon   Release Date: March 19, 2025

This release adds a new Azure Logic App SAS detector, along with improvements to LINE Messaging and OpenAI API Key detectors.

New Detectors​

Detector Improvements​

  • LINE Messaging OAuth2 – Removed false positives from the LINE Messaging OAuth2 detector.
  • OpenAI API Key – Fixed a bug in the analyzer for OpenAI API Key that prevented it from reporting threads:* scopes.

Detector changes​

  • FCM API Key – Removed FCM API Key checker since its API was removed.

Miscellaneous​

  • Add User Agent GitGuardian in HTTPClient class used by analyzers.

Detection Engine Updates Version 2.133

calendar icon   Release Date: February 27, 2025

This update introduces several critical security detectors for popular services, notably expanding OpenAI detection capabilities with new Project API Key, Admin API Key, and improved Service Account detection patterns. The addition of 1Password Service Account Token detection is equally significant, as both these services represent high-value security targets. OpenAI API keys provide access to powerful AI capabilities and could lead to substantial usage charges if compromised, while 1Password tokens could potentially expose entire password vaults containing sensitive credentials across an organization.

New Detectors​

Improved Detection​

  • OpenAI Service Account – Expanded pattern coverage for better identification.
  • Rails Master Key – Updated detection rules to minimize false positives.
  • GitHub Tokens – Improved recall and validation for GitHub authentication tokens.
  • Groq API Key – Enhanced detection rules for greater accuracy.
  • Artifactory Token – New checker added to improve detection effectiveness.
  • Generic Passwords – Excluded secrets containing ***** as they are likely false positives.
  • Dropbox Key – Detector group split into Dropbox Key and Dropbox Access Token for improved granularity.
  • FCM API Key – Validity check is no longer available since the API has been removed. While we can no longer retrieve the validity status for FCM secrets, we still detect the keys.

Detection Engine Updates Version 2.131 + 2.132

calendar icon   Release Date: February 11, 2025

This release introduces 5 new detectors including SMB Credentials, Azure Storage Connection String, DeepSeek API Key, Netlify Token v2, and 1Password Service Account Token.

New Detectors​

Detector Improvements​

  • Microsoft Azure Storage Account Key – Detector Upgrade: Removed a false positive from Microsoft Azure Storage Account Key (example from Microsoft documentation).
  • Generic Password – Detector Upgrade: Removed secrets with ***** as they are likely to be false positives.
  • Groq API Key – Detector Upgrade: Improved recall for Groq API.
  • Netlify Token – Checker Upgrade: Updated checker to match the documentation.

Engine Enhancements​

  • Enabled HTTPChecker to function without a base URL.
  • Network caching has been improved in some analyzers, resulting in fewer HTTP calls.

Detection Engine Updates Version 2.130

calendar icon   Release Date: January 28, 2025

This release adds new detectors for Artifactory Token with Host and HubSpot Private App Token, along with enhanced validation for GitHub tokens.

New Detectors​

Improved Detection for GitHub Tokens​

Detection engine releases - Previous versions

Browse all past GitGuardian detection engine releases below, including new and modified detectors.

December 23, 2024​

Secrets Detection​

December 12, 2024​

Secrets Detection​

November 18, 2024​

Secrets Detection​

November 4, 2024​

Secrets Detection​

October 21, 2024​

Secrets Detection​

October 7, 2024​

Secrets Detection​

August 26, 2024​

Secrets Detection​

Secrets detection engine upgrade to v2.120: Enhance recall and coverage while expanding the range of detectable secrets with updated detectors.

Note concerning the reCAPTCHA Key detector: Due to changes in the behavior of some Google APIs, we are no longer able to ensure the validity of reCaptcha keys. As this detector could be quite "noisy" the validity of the keys was a mandatory prerequisite in the detection flow and this can no longer be the case. We have however improved this detector to be as efficient as possible.

August 14, 2024​

Secrets Detection​

  • Secrets detection engine upgrade to version 2.117: Enhance recall and coverage while expanding the range of detectable secrets with new and updated detectors.

July 15, 2024​

Secrets Detection​

June 17, 2024​

Secrets Detection​

June 4, 2024​

Secrets Detection​

May 20, 2024​

Secrets Detection​

April 23, 2024​

Secrets Detection​

April 15, 2024​

Secrets Detection​

April 8, 2024​

Secrets Detection​

March 18, 2024​

Secrets Detection​

Something we didn’t cover?

See our Roadmap

Subscribe on GitHub

Submit a request

API status