# detect-secrets vs Whispers

| Attribute | detect-secrets | Whispers |
|---|---|---|
| **Vioscale score** | 42.5 (28% (low)) | 66 (13% (low)) |
| activity.commits_last_30d | 0 | - |
| adoption.dependent_repos | 276 | 0 |
| adoption.github_stars | 4,629 | 505 |
| deployment.options | `{"self_hosted":true}` | `{"cloud":true,"self_hosted":true}` |
| description.long | An open-source security tool that scans code repositories to identify exposed secrets such as API keys, passwords, and tokens using pattern matching and heuristic filters. Designed with enterprise needs in mind, supporting custom plugins, baseline auditing, and integration with CI/CD pipelines. | A security-focused command-line tool that scans various file formats (YAML, shell scripts, Python, configuration files) to identify embedded passwords, API tokens, AWS keys, and other hardcoded secrets. It can be run independently or integrated into CI/CD pipelines. |
| integrations.count | 22 | - |
| integrations.list | `[{"name":"AWS"},{"name":"Azure"},{"name":"GitHub"},{"name":"GitLab"},{"name":"Slack"},{"name":"Stripe"},{"name":"Twilio"},{"name":"SendGrid"},{"name":"Mailchimp"},{"name":"OpenAI"},{"name":"Discord"},{"name":"Telegram"},{"name":"npm"},{"name":"IBM Cloud"},{"name":"IBM Cloudant"},{"name":"Artifactory"},{"name":"Square"},{"name":"Softlayer"},{"name":"PyPI"},{"name":"Private Key detection"},{"name":"JWT Token detection"},{"name":"Basic Auth detection"}]` | - |
| language.primary | Python | Python |
| license.spdx | Apache-2.0 | Apache-2.0 |
| market.availability | `{"hqCountry":"US","primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` | `{"hqCountry":"GB","primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` |
| platform.support | `{"cli":true}` | `{"cli":true}` |
| pricing | `{"type":"open_source","summary":"Free and open source","sourceUrl":"https://github.com/pricing","retrievedAt":"2026-08-19T21:37:03.703Z"}` | `{"type":"open_source","plans":[{"free":true,"name":"Open Source","summary":"Free, open source","features":["CLI usage","CI/CD pipeline integration","Detects passwords, API tokens, AWS keys, sensitive files","Supports YAML, conf/ini, Dockercfg, shell scripts, Python3","Configurable rules and filters","Custom rule support"],"contactSales":false}],"summary":"Free, open source","freeTier":true,"sourceUrl":"https://github.com/pricing","retrievedAt":"2026-08-19T21:37:31.942Z"}` |
| pricing.free_tier | - | yes |
| pricing.model | commercial | commercial |
| pricing.price_level | free | free |
| pricing.transparent | yes | yes |
| release.cadence_days | 115 | 6 |
| release.history | `[{"url":"https://github.com/Yelp/detect-secrets/releases/tag/v1.5.0","date":"2024-05-06T18:05:06Z","type":"stable","version":"v1.5.0"},{"url":"https://github.com/Yelp/detect-secrets/releases/tag/v1.4.0","date":"2022-10-05T17:13:10Z","type":"stable","version":"v1.4.0"},{"url":"https://github.com/Yelp/detect-secrets/releases/tag/v1.3.0","date":"2022-07-22T15:22:53Z","type":"stable","version":"v1.3.0"},{"url":"https://github.com/Yelp/detect-secrets/releases/tag/v1.2.0","date":"2022-02-16T22:16:52Z","type":"stable","version":"v1.2.0"},{"url":"https://github.com/Yelp/detect-secrets/releases/tag/v1.1.0","date":"2021-04-14T21:14:42Z","type":"stable","version":"v1.1.0"},{"url":"https://github.com/Yelp/detect-secrets/releases/tag/v0.14.3","date":"2020-10-01T16:40:07Z","type":"stable","version":"v0.14.3"},{"url":"https://github.com/Yelp/detect-secrets/releases/tag/v0.14.2","date":"2020-07-31T16:51:26Z","type":"stable","version":"v0.14.2"},{"url":"https://github.com/Yelp/detect-secrets/releases/tag/v0.14.1","date":"2020-07-13T18:46:48Z","type":"stable","version":"v0.14.1"},{"url":"https://github.com/Yelp/detect-secrets/releases/tag/v0.14.0","date":"2020-07-09T21:06:25Z","type":"stable","version":"v0.14.0"}]` | `[{"url":"https://github.com/Skyscanner/whispers/releases/tag/1.5.3","date":"2021-08-25T20:08:40Z","type":"stable","version":"1.5.3"},{"url":"https://github.com/Skyscanner/whispers/releases/tag/1.5.2","date":"2021-08-25T18:33:23Z","type":"stable","version":"1.5.2"},{"url":"https://github.com/Skyscanner/whispers/releases/tag/1.5.1","date":"2021-08-18T22:56:45Z","type":"stable","version":"1.5.1"},{"url":"https://github.com/Skyscanner/whispers/releases/tag/1.5.0","date":"2021-08-18T21:33:41Z","type":"stable","version":"1.5.0"},{"url":"https://github.com/Skyscanner/whispers/releases/tag/1.4.9","date":"2021-05-31T20:32:26Z","type":"stable","version":"1.4.9"},{"url":"https://github.com/Skyscanner/whispers/releases/tag/1.4.8","date":"2021-04-19T16:09:58Z","type":"stable","version":"1.4.8"},{"url":"https://github.com/Skyscanner/whispers/releases/tag/1.4.7","date":"2021-03-23T20:48:34Z","type":"stable","version":"1.4.7"},{"url":"https://github.com/Skyscanner/whispers/releases/tag/1.4.6","date":"2021-03-22T12:05:27Z","type":"stable","version":"1.4.6"},{"url":"https://github.com/Skyscanner/whispers/releases/tag/1.4.5","date":"2021-03-18T18:08:22Z","type":"stable","version":"1.4.5"},{"url":"https://github.com/Skyscanner/whispers/releases/tag/1.4.4","date":"2021-03-06T00:06:32Z","type":"stable","version":"1.4.4"},{"url":"https://github.com/Skyscanner/whispers/releases/tag/1.4.3","date":"2021-03-01T11:22:24Z","type":"stable","version":"1.4.3"},{"url":"https://github.com/Skyscanner/whispers/releases/tag/1.4.2","date":"2021-02-16T12:06:51Z","type":"stable","version":"1.4.2"},{"url":"https://github.com/Skyscanner/whispers/releases/tag/1.4.1","date":"2021-02-02T18:38:41Z","type":"stable","version":"1.4.1"},{"url":"https://github.com/Skyscanner/whispers/releases/tag/1.4.0","date":"2021-01-27T17:28:53Z","type":"stable","version":"1.4.0"},{"url":"https://github.com/Skyscanner/whispers/releases/tag/1.3.12","date":"2021-01-21T17:19:15Z","type":"stable","version":"1.3.12"},{"url":"https://github.com/Skyscanner/whispers/releases/tag/1.3.11","date":"2021-01-20T15:44:53Z","type":"stable","version":"1.3.11"},{"url":"https://github.com/Skyscanner/whispers/releases/tag/1.3.10","date":"2021-01-19T20:39:31Z","type":"stable","version":"1.3.10"},{"url":"https://github.com/Skyscanner/whispers/releases/tag/1.3.9","date":"2021-01-08T17:42:58Z","type":"stable","version":"1.3.9"},{"url":"https://github.com/Skyscanner/whispers/releases/tag/1.3.8","date":"2020-12-16T19:49:24Z","type":"stable","version":"1.3.8"},{"url":"https://github.com/Skyscanner/whispers/releases/tag/1.3.7","date":"2020-12-01T01:20:33Z","type":"stable","version":"1.3.7"}]` |
| security.vulnerabilities | `{"count":0,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=pypi&package_name=detect-secrets&per_page=100","last_12m":0,"max_severity":null}` | `{"count":0,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=nixpkgs&package_name=whispers&per_page=100","last_12m":0,"max_severity":null}` |

## Capabilities (Secrets Scanning)

| Capability | detect-secrets | Whispers |
|---|:--:|:--:|
| **Capabilities** |  |  |
| Deployment model | - | - |
| Git repository historical scanning | - | - |
| Pre commit developer hooks | - | - |
| Active token validation engine | - | - |
| High entropy regex detection | - | - |
| Slack teams jira scanning | - | - |
| Automated key revocation apis | - | - |
| Custom regex rules support | - | - |
| Ci cd pipeline build blocking | - | - |
| Compliance audit reporting | - | - |
| SOC2 type ii | - | - |
| ISO 27001 | - | - |
| Pricing model | - | - |

*Source: Vioscale. Generated 2026-09-01T15:05:52.520Z. "-" = undocumented, not absent.*