For Developers

Catch Leaked Secrets in CI/CD Before They Hit Production

Automate secret detection in your development workflow. Integrate with GitHub Actions, GitLab CI, Jenkins, or any pipeline using our REST API. Fail builds when credentials are exposed, not after attackers find them.

Get Your API Key

Developer-Friendly Features

Everything you need to integrate secret scanning into your workflow

REST API

Simple JSON API with OpenAPI 3.1 specification and extensive documentation. Create scans, poll for results, and retrieve detailed reports programmatically.

Actionable Results

Get specific secret types, file locations. Know exactly what to fix and where.

Multiple API key support

Subscribe and manage multiple API key per account, track usage though your dedicated dashboard.

Shift Left with GitHub Actions

Add secret scanning to your CI/CD pipeline in minutes

.github/workflows/secretsbuster.yml

name: SecretsBuster Scan

on:
  push:
    branches:
      - main
  pull_request:
    branches:
      - main

jobs:
  scan:
    runs-on: ubuntu-latest
    steps:
      - name: Run SecretsBuster scanner
        uses: rank0-dev/secretsbuster-scan-action@v1
        with:
          sb-api-key: ${{ secrets.SB_API_KEY }}
          targets: |
            https://example.com
            https://staging.example.com

Scan multiple URLs in one workflow

Automatic polling until scan completes

Fails workflow on leaked secrets

JSON output for downstream steps

View GitHub Action Documentation

Simple, Transparent Pricing

No surprises. Pay for what you use.

Developer

100 scans/month - API access - GitHub Action

€9

per month (excl. VAT)

Get Started

14-day trial

Team

2000 scans/month - All 'Developer' plan features + Dashboard access

€29