Whispers

Also known as
whispers

Available worldwide

What is Whispers?

A security-focused command-line tool that scans various file formats (YAML, shell scripts, Python, configuration files) to identify embedded passwords, API tokens, AWS keys, and other hardcoded secrets. It can be run independently or integrated into CI/CD pipelines.

Independently observed

Whispers pricing

Plans, per-tier features and add-ons, dated and linked to live pricing. Pricing changes often; always verify at source before you rely on it.

Pricing as of verify at live pricing ↗Independently observed
Open sourceFree tier

Free, open source

Open Source

Free
Free
  • CLI usage
  • CI/CD pipeline integration
  • Detects passwords, API tokens, AWS keys, sensitive files
  • Supports YAML, conf/ini, Dockercfg, shell scripts, Python3
  • Configurable rules and filters
  • Custom rule support

Platform & deployment

Independently observed
Platforms
  • CLI
Deployment
  • Cloud / SaaS
  • Self-hosted

Security & compliance

Known vulnerabilities: 0 (0 in the last 12 months) sourcea count reflects scale & disclosure, not quality

Whispers alternatives

Other secrets scanning we track, ranked by the same independent score.

All Whispers alternatives, ranked →

Compare Whispers

Side by side against other secrets scanning, attribute by attribute, with a source on every value.

Independent · unbought · dated

The Vioscale score: one lens on the evidence

Not user reviews and not a paid placement: a confidence-weighted blend of the independent signals below (adoption, activity, security posture, and more), which you can sort and re-weight yourself. Vendors can correct their listing but can never move their rank, and stars are weighted low as a vanity metric. It is one way to read the evidence for Whispers, not the verdict.

Balanced composite 66 / 100
low · 13%
Signal contributions to the composite score
SignalScoreWeightContributionEvidence
Pricing transparency800.086.7
Price level1000.055.2
Release cadence970.055.0
Stars510.031.3
Reliability00.070.0-
Capabilities00.080.0-
Integrations00.090.0-
Dependent projects00.060.0
Development activity00.090.0-
Security posture00.070.0-
Package downloads00.140.0-
Security score00.040.0-
Developer Q&A activity00.060.0-

Computed . Re-weight it by intent, or see the full method.

All data & sourcesshow ↓

Every value we hold, with its source, retrieval date, and confidence. This is the evidence behind the score: don't trust it, verify it.

Adoption

AttributeValueEvidence
Github stars505highsource · 2026-08-26 · 90%
Dependent repos0highsource · 2026-08-26 · 85%

Language

AttributeValueEvidence
PrimaryPythonhighsource · 2026-08-26 · 90%

License

AttributeValueEvidence
SpdxApache-2.0highsource · 2026-08-26 · 95%

Market

AttributeValueEvidence
AvailabilityHqCountry: GB · PrimaryMarkets: … · AvailabilityScope: global · AvailableCountries: … · NotAvailableCountries: …highsource · 2026-08-19 · 75%

Pricing

AttributeValueEvidence
Modelcommerciallowsource · 2026-08-26 · 40%
Free tierYesmediumsource · 2026-08-19 · 60%
Price levelfreemediumsource · 2026-08-19 · 60%
TransparentYesmediumsource · 2026-08-19 · 60%

Release

AttributeValueEvidence
Cadence days6mediumsource · 2026-08-26 · 70%
History20 itemsmediumsource · 2026-08-26 · 70%

Security

AttributeValueEvidence
VulnerabilitiesCount: 0 · Source: https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=nixpkgs&package_name=whispers&per_page=100 · Last 12m: 0highsource · 2026-08-26 · 90%