# BFG Repo-Cleaner vs Spectral

| Attribute | BFG Repo-Cleaner | Spectral |
|---|---|---|
| **vioscaleAI score** | 29.3 (63% (medium)) | 33.2 (69% (medium)) |
| activity.commits_last_30d | 0 | - |
| adoption.dependent_repos | 60 | - |
| adoption.github_stars | 12,201 | - |
| content.faq | `[{"answer":"A command-line tool that removes large blobs and sensitive data from Git repositories. Distributed as free and open source software under the GNU General Public License. It is indexed under Secrets Scanning.","source":"https://rtyley.github.io/bfg-repo-cleaner","question":"What is BFG Repo-Cleaner?","confidence":0.6},{"answer":"BFG Repo-Cleaner is open source, so it can be self-hosted and used at no licence cost. It is released under the GPL-3.0 licence. Pricing changes often, so verify at source before relying on it.","source":"https://rtyley.github.io/bfg-repo-cleaner","question":"Is BFG Repo-Cleaner free to use?","confidence":0.6},{"answer":"BFG Repo-Cleaner supports a command-line interface. Platforms we have not confirmed are simply not listed here rather than ruled out.","source":"https://rtyley.github.io/bfg-repo-cleaner","question":"What platforms does BFG Repo-Cleaner support?","confidence":0.6},{"answer":"Yes. BFG Repo-Cleaner can be deployed self-hosted, so it does not have to run on the vendor's infrastructure.","source":"https://rtyley.github.io/bfg-repo-cleaner","question":"Can BFG Repo-Cleaner be self-hosted?","confidence":0.6},{"answer":"Yes. BFG Repo-Cleaner is published under the GPL-3.0 licence, a copyleft licence, so check its terms before embedding it in a closed-source product. Licence terms can change between releases, so verify against the repository for the version you intend to use.","source":"https://github.com/rtyley/bfg-repo-cleaner","question":"Is BFG Repo-Cleaner open source?","confidence":0.95}]` | - |
| deployment.options | `{"self_hosted":true}` | - |
| description.long | A Scala-based utility that removes large or problematic files from Git repository history more efficiently than the standard git-filter-branch command. | A codebase scanning tool that detects exposed secrets and vulnerabilities across repositories, helping teams prioritize security issues and prevent breaches. |
| features.capabilities | `{"pricing_model":"open_source","deployment_model":"local_cli_only","git_repository_historical_scanning":true}` | `{"deployment_model":"cloud_managed_saas","pre_commit_developer_hooks":true,"high_entropy_regex_detection":true,"git_repository_historical_scanning":true}` |
| integrations.count | - | 1 |
| integrations.list | - | `[{"name":"Slack"}]` |
| language.primary | Scala | - |
| license.spdx | GPL-3.0 | - |
| market.availability | - | `{"primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` |
| platform.support | `{"cli":true}` | - |
| pricing | `{"type":"open_source","freeTier":true,"sourceUrl":"https://rtyley.github.io/bfg-repo-cleaner","retrievedAt":"2026-10-15T20:24:15.655Z"}` | - |
| pricing.free_tier | yes | - |
| pricing.model | open_source | - |
| pricing.price_level | free | - |
| release.cadence_days | 118 | - |
| release.history | `[{"url":"https://github.com/rtyley/bfg-repo-cleaner/releases/tag/v1.15.0","date":"2025-01-18T21:34:32Z","type":"stable","version":"v1.15.0"},{"url":"https://github.com/rtyley/bfg-repo-cleaner/releases/tag/v1.14.0","date":"2021-02-27T16:46:21Z","type":"stable","version":"v1.14.0"},{"url":"https://github.com/rtyley/bfg-repo-cleaner/releases/tag/v1.13.0","date":"2018-01-31T09:26:15Z","type":"stable","version":"v1.13.0"},{"url":"https://github.com/rtyley/bfg-repo-cleaner/releases/tag/v1.12.5","date":"2015-10-01T22:41:36Z","type":"stable","version":"v1.12.5"},{"url":"https://github.com/rtyley/bfg-repo-cleaner/releases/tag/v1.12.4","date":"2015-08-06T08:58:16Z","type":"stable","version":"v1.12.4"},{"url":"https://github.com/rtyley/bfg-repo-cleaner/releases/tag/git-lfs-alpha","date":"2015-04-09T10:11:24Z","type":"prerelease","version":"git-lfs-alpha"},{"url":"https://github.com/rtyley/bfg-repo-cleaner/releases/tag/v1.12.0","date":"2015-01-01T20:14:58Z","type":"stable","version":"v1.12.0"},{"url":"https://github.com/rtyley/bfg-repo-cleaner/releases/tag/v1.11.5","date":"2014-04-20T14:20:59Z","type":"stable","version":"v1.11.5"},{"url":"https://github.com/rtyley/bfg-repo-cleaner/releases/tag/v1.11.2","date":"2014-03-25T09:49:27Z","type":"stable","version":"v1.11.2"},{"url":"https://github.com/rtyley/bfg-repo-cleaner/releases/tag/v1.11.1","date":"2014-02-01T17:33:31Z","type":"stable","version":"v1.11.1"}]` | - |
| security.scorecard | 2.8 | - |
| security.vulnerabilities | `{"count":0,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=homebrew&package_name=bfg&per_page=100","last_12m":0,"max_severity":null}` | - |

## Capabilities (Secrets Scanning)

| Capability | BFG Repo-Cleaner | Spectral |
|---|:--:|:--:|
| **Capabilities** |  |  |
| Deployment model | Local CLI only | Cloud managed saas |
| Git repository historical scanning | ✓ | ✓ |
| Pre commit developer hooks | - | ✓ |
| Active token validation engine | - | - |
| High entropy regex detection | - | ✓ |
| Slack teams jira scanning | - | - |
| Automated key revocation apis | - | - |
| Custom regex rules support | - | - |
| Ci cd pipeline build blocking | - | - |
| Compliance audit reporting | - | - |
| SOC2 type ii | - | - |
| ISO 27001 | - | - |
| Pricing model | Open source | - |

*Source: vioscaleAI. Generated 2026-10-16T04:36:21.908Z. "-" = undocumented, not absent.*