Launch of Betterleaks: Advanced Open-Source Secret Scanning Tool

On March 15, 2026, Zach Rice launched Betterleaks, an open-source tool designed to scan directories, files, and Git repositories for sensitive information such as credentials and API keys. Betterleaks is positioned as an advanced successor to Gitleaks, which Rice previously developed. The tool employs Common Expression Language (CEL) for rule-defined validation and boasts a recall rate of 98.6% on the CredData dataset. It is implemented in pure Go, eliminating dependencies on CGO or Hyperscan, and features an expanded rule set for various providers. Future updates will include support for additional data sources, LLM-assisted analysis, and automatic secret revocation. Betterleaks aims to enhance security by helping developers identify and protect sensitive information before it can be exploited by threat actors. The project is supported by Aikido Security and is maintained under the MIT license. Rice lost full control over Gitleaks, prompting the development of Betterleaks as a more robust solution.

Key Points: • Betterleaks is an open-source tool for scanning sensitive information in codebases. • It achieves a 98.6% recall rate using advanced scanning techniques. • Future features will enhance its capabilities, including LLM-assisted analysis.