# Noseyparker vs Whispers

| Attribute | Noseyparker | Whispers |
|---|---|---|
| **vioscaleAI score** | 40.7 (69% (medium)) | 47.6 (28% (low)) |
| activity.commits_last_30d | 0 | - |
| adoption.dependent_repos | 0 | 0 |
| adoption.github_stars | 2,337 | 505 |
| content.faq | `[{"answer":"A command-line utility that scans source code, directories, and Git history to uncover exposed credentials, API keys, and other sensitive information. It is indexed under Secrets Scanning.","source":"https://github.com/pricing","question":"What is Noseyparker?","confidence":0.6},{"answer":"Noseyparker is open source, so it can be self-hosted and used at no licence cost. It is released under the Apache-2.0 licence. Pricing changes often, so verify at source before relying on it.","source":"https://github.com/pricing","question":"Is Noseyparker free to use?","confidence":0.6},{"answer":"Noseyparker supports macOS, Linux and a command-line interface. Platforms we have not confirmed are simply not listed here rather than ruled out.","source":"https://github.com/pricing","question":"What platforms does Noseyparker support?","confidence":0.6},{"answer":"Yes. Noseyparker can be deployed self-hosted, so it does not have to run on the vendor's infrastructure.","source":"https://github.com/pricing","question":"Can Noseyparker be self-hosted?","confidence":0.6},{"answer":"Yes. Noseyparker is published under the Apache-2.0 licence, a permissive licence that generally allows commercial use and modification. Licence terms can change between releases, so verify against the repository for the version you intend to use.","source":"https://github.com/praetorian-inc/noseyparker","question":"Is Noseyparker open source?","confidence":0.95}]` | `[{"answer":"A security-focused command-line tool that scans various file formats (YAML, shell scripts, Python, configuration files) to identify embedded passwords, API tokens, AWS keys, and other hardcoded secrets. It can be run independently or integrated into CI/CD pipelines. It is indexed under Secrets Scanning.","source":"https://github.com/pricing","question":"What is Whispers?","confidence":0.6},{"answer":"Whispers is open source, so it can be self-hosted and used at no licence cost. It is released under the Apache-2.0 licence. Pricing changes often, so verify at source before relying on it.","source":"https://github.com/pricing","question":"Is Whispers free to use?","confidence":0.6},{"answer":"Whispers supports a command-line interface. Platforms we have not confirmed are simply not listed here rather than ruled out.","source":"https://github.com/pricing","question":"What platforms does Whispers support?","confidence":0.6},{"answer":"Yes. Whispers can be deployed cloud / SaaS and self-hosted, so it does not have to run on the vendor's infrastructure.","source":"https://github.com/pricing","question":"Can Whispers be self-hosted?","confidence":0.6},{"answer":"Yes. Whispers is published under the Apache-2.0 licence, a permissive licence that generally allows commercial use and modification. Licence terms can change between releases, so verify against the repository for the version you intend to use.","source":"https://github.com/Skyscanner/whispers","question":"Is Whispers open source?","confidence":0.95},{"answer":"Whispers is available worldwide. The vendor is headquartered in the United Kingdom.","source":"https://github.com/pricing","question":"Where is Whispers available?","confidence":0.75}]` |
| deployment.options | `{"self_hosted":true}` | `{"self_hosted":true}` |
| description.long | A command-line utility designed to detect hidden secrets, API keys, and sensitive information within codebases, file systems, and Git repositories. It provides high-precision detection for security teams to identify credential leaks before they reach production. | Whispers analyzes code and common configuration formats to identify hardcoded credentials, authentication tokens, and sensitive information. It runs as a CLI tool or integrates into CI/CD pipelines with support for custom detection rules. |
| features.capabilities | `{"soc2_type_ii":true,"pricing_model":"per_developer_seat","deployment_model":"hybrid","compliance_audit_reporting":true,"custom_regex_rules_support":true,"pre_commit_developer_hooks":true,"high_entropy_regex_detection":true,"ci_cd_pipeline_build_blocking":true,"active_token_validation_engine":true,"git_repository_historical_scanning":true}` | `{"pricing_model":"open_source","deployment_model":"local_cli_only","custom_regex_rules_support":true,"active_token_validation_engine":true}` |
| integrations.count | 20 | - |
| integrations.list | `[{"name":"GitHub"},{"name":"DefectDojo"},{"name":"Linear","native":true,"category":"project_management"},{"name":"CircleCI","native":false,"category":"ci_cd"},{"name":"Azure Pipelines","native":false,"category":"ci_cd"},{"name":"Codemagic","native":false,"category":"ci_cd"},{"name":"Render","native":false,"category":"deployment"},{"name":"Codecov","native":false,"category":"testing"},{"name":"Codacy","native":false,"category":"code_quality"},{"name":"CodeFactor","native":false,"category":"code_review"},{"name":"DeepScan","native":false,"category":"security"},{"name":"GuardRails","native":false,"category":"security"},{"name":"Zenhub","native":false,"category":"project_management"},{"name":"Zube","native":false,"category":"project_management"},{"name":"Mergify","native":false,"category":"automation"},{"name":"PullRequest","native":false,"category":"code_review"},{"name":"Rollbar","native":false,"category":"monitoring"},{"name":"WakaTime","native":false,"category":"analytics"},{"name":"POEditor","native":false,"category":"localization"},{"name":"Rewind Backups","native":false,"category":"backup"},{"name":"AWS","native":false,"category":"security"},{"name":"Azure","native":false,"category":"cloud"},{"name":"Google Cloud","native":false,"category":"cloud"},{"name":"Codemagic CI/CD","native":false,"category":"ci_cd"},{"name":"Linear Code","native":false,"category":"collaboration"},{"name":"Qlty Cloud","native":false,"category":"image_optimization"},{"name":"Rewind Backups for GitHub","native":false},{"name":"OpenCode","native":false},{"name":"Git"}]` | - |
| language.primary | Rust | Python |
| license.spdx | Apache-2.0 | Apache-2.0 |
| market.availability | `{"primaryMarkets":[],"availabilityScope":"regional","availableCountries":["EU","AU"],"notAvailableCountries":[]}` | `{"hqCountry":"GB","primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` |
| platform.support | `{"cli":true,"mac":true,"linux":true}` | `{"cli":true}` |
| pricing | `{"type":"subscription","plans":[{"free":true,"name":"Free","summary":"Free tier","features":["2,000 CI/CD minutes per month","Repository rules","Secret scanning with push protection","Dependabot vulnerability alerts","Audit log access"],"components":[{"kind":"fixed","amount":0,"period":"month","currency":"USD"}],"contactSales":false,"includedLimits":{"ci_cd_minutes":"2000/month"}}],"addOns":[{"name":"Codespaces compute and storage","components":[{"per":{"qty":1,"unit":"hour"},"kind":"metered","amount":0.18,"currency":"USD"},{"per":{"qty":1,"unit":"GB"},"kind":"metered","amount":0.07,"currency":"USD"}]}],"summary":"Free tier available. Enterprise plans start with 30-day free trial.","currency":"USD","freeTier":true,"sourceUrl":"https://github.com/pricing","retrievedAt":"2026-09-14T15:37:06.527Z","freeTrialDays":30,"billingPeriods":["month"]}` | `{"type":"open_source","plans":[{"free":true,"name":"Open Source","summary":"Free, open source","features":["CLI usage","CI/CD pipeline integration","Detects passwords, API tokens, AWS keys, sensitive files","Supports YAML, conf/ini, Dockercfg, shell scripts, Python3","Configurable rules and filters","Custom rule support"],"contactSales":false}],"summary":"Free, open source","freeTier":true,"sourceUrl":"https://github.com/pricing","retrievedAt":"2026-08-19T21:37:31.942Z"}` |
| pricing.free_tier | yes | yes |
| pricing.model | open_source | open_source |
| pricing.price_level | free | free |
| pricing.starting_price | `{"amount":19,"currency":"USD"}` | - |
| pricing.transparent | yes | yes |
| release.cadence_days | 55 | 6 |
| release.history | `[{"url":"https://github.com/praetorian-inc/noseyparker/releases/tag/v0.24.0","date":"2025-05-08T21:06:39Z","type":"stable","version":"v0.24.0"},{"url":"https://github.com/praetorian-inc/noseyparker/releases/tag/v0.23.0","date":"2025-01-28T17:00:53Z","type":"stable","version":"v0.23.0"},{"url":"https://github.com/praetorian-inc/noseyparker/releases/tag/v0.22.0","date":"2024-12-20T19:41:55Z","type":"stable","version":"v0.22.0"},{"url":"https://github.com/praetorian-inc/noseyparker/releases/tag/v0.21.0","date":"2024-11-20T19:07:35Z","type":"stable","version":"v0.21.0"},{"url":"https://github.com/praetorian-inc/noseyparker/releases/tag/v0.20.0","date":"2024-10-04T17:40:31Z","type":"stable","version":"v0.20.0"},{"url":"https://github.com/praetorian-inc/noseyparker/releases/tag/v0.19.0","date":"2024-07-30T22:10:23Z","type":"stable","version":"v0.19.0"},{"url":"https://github.com/praetorian-inc/noseyparker/releases/tag/v0.18.1","date":"2024-07-12T17:33:07Z","type":"stable","version":"v0.18.1"},{"url":"https://github.com/praetorian-inc/noseyparker/releases/tag/v0.18.0","date":"2024-06-27T20:53:49Z","type":"stable","version":"v0.18.0"},{"url":"https://github.com/praetorian-inc/noseyparker/releases/tag/v0.17.0","date":"2024-03-05T15:00:06Z","type":"stable","version":"v0.17.0"},{"url":"https://github.com/praetorian-inc/noseyparker/releases/tag/v0.16.0","date":"2023-12-06T22:09:24Z","type":"stable","version":"v0.16.0"},{"url":"https://github.com/praetorian-inc/noseyparker/releases/tag/v0.15.0","date":"2023-10-13T02:59:22Z","type":"stable","version":"v0.15.0"},{"url":"https://github.com/praetorian-inc/noseyparker/releases/tag/v0.14.0","date":"2023-08-17T17:08:15Z","type":"stable","version":"v0.14.0"},{"url":"https://github.com/praetorian-inc/noseyparker/releases/tag/v0.13.0","date":"2023-04-24T19:23:18Z","type":"stable","version":"v0.13.0"},{"url":"https://github.com/praetorian-inc/noseyparker/releases/tag/v0.12.0","date":"2023-03-02T21:59:08Z","type":"stable","version":"v0.12.0"},{"url":"https://github.com/praetorian-inc/noseyparker/releases/tag/v0.11.0","date":"2022-12-30T17:31:05Z","type":"stable","version":"v0.11.0"}]` | `[{"url":"https://github.com/Skyscanner/whispers/releases/tag/1.5.3","date":"2021-08-25T20:08:40Z","type":"stable","version":"1.5.3"},{"url":"https://github.com/Skyscanner/whispers/releases/tag/1.5.2","date":"2021-08-25T18:33:23Z","type":"stable","version":"1.5.2"},{"url":"https://github.com/Skyscanner/whispers/releases/tag/1.5.1","date":"2021-08-18T22:56:45Z","type":"stable","version":"1.5.1"},{"url":"https://github.com/Skyscanner/whispers/releases/tag/1.5.0","date":"2021-08-18T21:33:41Z","type":"stable","version":"1.5.0"},{"url":"https://github.com/Skyscanner/whispers/releases/tag/1.4.9","date":"2021-05-31T20:32:26Z","type":"stable","version":"1.4.9"},{"url":"https://github.com/Skyscanner/whispers/releases/tag/1.4.8","date":"2021-04-19T16:09:58Z","type":"stable","version":"1.4.8"},{"url":"https://github.com/Skyscanner/whispers/releases/tag/1.4.7","date":"2021-03-23T20:48:34Z","type":"stable","version":"1.4.7"},{"url":"https://github.com/Skyscanner/whispers/releases/tag/1.4.6","date":"2021-03-22T12:05:27Z","type":"stable","version":"1.4.6"},{"url":"https://github.com/Skyscanner/whispers/releases/tag/1.4.5","date":"2021-03-18T18:08:22Z","type":"stable","version":"1.4.5"},{"url":"https://github.com/Skyscanner/whispers/releases/tag/1.4.4","date":"2021-03-06T00:06:32Z","type":"stable","version":"1.4.4"},{"url":"https://github.com/Skyscanner/whispers/releases/tag/1.4.3","date":"2021-03-01T11:22:24Z","type":"stable","version":"1.4.3"},{"url":"https://github.com/Skyscanner/whispers/releases/tag/1.4.2","date":"2021-02-16T12:06:51Z","type":"stable","version":"1.4.2"},{"url":"https://github.com/Skyscanner/whispers/releases/tag/1.4.1","date":"2021-02-02T18:38:41Z","type":"stable","version":"1.4.1"},{"url":"https://github.com/Skyscanner/whispers/releases/tag/1.4.0","date":"2021-01-27T17:28:53Z","type":"stable","version":"1.4.0"},{"url":"https://github.com/Skyscanner/whispers/releases/tag/1.3.12","date":"2021-01-21T17:19:15Z","type":"stable","version":"1.3.12"},{"url":"https://github.com/Skyscanner/whispers/releases/tag/1.3.11","date":"2021-01-20T15:44:53Z","type":"stable","version":"1.3.11"},{"url":"https://github.com/Skyscanner/whispers/releases/tag/1.3.10","date":"2021-01-19T20:39:31Z","type":"stable","version":"1.3.10"},{"url":"https://github.com/Skyscanner/whispers/releases/tag/1.3.9","date":"2021-01-08T17:42:58Z","type":"stable","version":"1.3.9"},{"url":"https://github.com/Skyscanner/whispers/releases/tag/1.3.8","date":"2020-12-16T19:49:24Z","type":"stable","version":"1.3.8"},{"url":"https://github.com/Skyscanner/whispers/releases/tag/1.3.7","date":"2020-12-01T01:20:33Z","type":"stable","version":"1.3.7"}]` |
| security.certifications | `[{"name":"SOC 2 Type 2","level":"Type 2","status":"active","auditor":"AICPA"},{"name":"SOC 1 Type 2","level":"Type 2","status":"active","auditor":"AICPA"}]` | - |
| security.gdpr | yes | - |
| security.soc2 | yes | - |
| security.trust_center | https://github.com/security | https://github.com/security |
| security.vulnerabilities | `{"count":0,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=nixpkgs&package_name=noseyparker&per_page=100","last_12m":0,"max_severity":null}` | `{"count":0,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=nixpkgs&package_name=whispers&per_page=100","last_12m":0,"max_severity":null}` |

## Capabilities (Secrets Scanning)

| Capability | Noseyparker | Whispers |
|---|:--:|:--:|
| **Capabilities** |  |  |
| Deployment model | Hybrid | Local CLI only |
| Git repository historical scanning | ✓ | - |
| Pre commit developer hooks | ✓ | - |
| Active token validation engine | ✓ | ✓ |
| High entropy regex detection | ✓ | - |
| Slack teams jira scanning | - | - |
| Automated key revocation apis | - | - |
| Custom regex rules support | ✓ | ✓ |
| Ci cd pipeline build blocking | ✓ | - |
| Compliance audit reporting | ✓ | - |
| SOC2 type ii | ✓ | - |
| ISO 27001 | - | - |
| Pricing model | Per developer seat | Open source |

*Source: vioscaleAI. Generated 2026-10-16T20:16:26.549Z. "-" = undocumented, not absent.*