Detectors

Every request passes through these detectors, in this order of priority when two find the same text: secrets first, then your terms and this machine’s identity, then personal data. A detector marked fail-closed stops the request if it fails, rather than letting text through unchecked.

Detector	Finds	Kind	Profiles	If it fails
latet-credentials	Latet personal tokens, computer keys, API keys, administration tokens, SCIM tokens, bridge tokens and one-time codes, and route keys in HTTPS identity addresses.	secret	all	fail-closed
gitleaks	API keys and tokens of known services, with the gitleaks ruleset: patterns, keywords, entropy thresholds and allowlists as gitleaks applies them.	secret	all	fail-closed
assignment	Values assigned to sensitive names (DB_PASSWORD=…, "api_key": "…", $env:TOKEN = …), and name=… pairs wherever they stand in a line.	secret	all	fail-closed
private-key	The whole body of a PEM/OpenSSH/PGP private key block (header and footer stay visible).	secret	all	fail-closed
credentials	Passwords in scheme://user:pass@host, JWTs and bearer/basic credentials.	secret	all	fail-closed
fields	Values by the field they sit in: secret names, your field rules and strict data mode.	secret; your fields; data values	all	fail-closed
pii	Structured personal data, each match validated (checksums, number plans, the IANA TLD list).	personal data	balanced, max	skipped, request flagged
terms	The user’s deny-list (client names, project code names, internal domains…).	your terms	all (when you add terms)	fail-closed
identity	This machine’s identity: the OS user inside home paths, the host name, the git author and its company’s domain.	identity	balanced, max	fail-closed
known-values	Every original already in the vault, matched exactly wherever it appears again.	any	all	fail-closed

Latet credentials

These built-in secret types apply in every profile, on a computer and in a server space. They use the same policies, allow lists, conversation restoration and outbound-tool checks as other secrets.

Type	Recognised value	Fake
LATET_PERSONAL_TOKEN	latet_pat_ followed by 43 URL-safe characters.	Public prefix and length kept; secret tail drawn again.
LATET_COMPUTER_KEY	latet_ck_ followed by 43 URL-safe characters.	Public prefix and length kept; secret tail drawn again.
LATET_API_KEY	latet_key_ followed by 43 URL-safe characters.	Public prefix and length kept; secret tail drawn again.
LATET_ADMIN_TOKEN	latet_adm_ followed by 43 URL-safe characters.	Public prefix and length kept; secret tail drawn again.
LATET_SCIM_TOKEN	latet_scim_ followed by 43 URL-safe characters.	Public prefix and length kept; secret tail drawn again.
LATET_BRIDGE_TOKEN	latet_brg_ followed by 43 URL-safe characters.	Public prefix and length kept; secret tail drawn again.
LATET_ONE_TIME_CODE	latet_code_ followed by 32 URL-safe characters.	Public prefix and length kept; secret tail drawn again.
LATET_ROUTE_KEY	The 16 to 128 URL-safe characters after /u/ in https://<host>/u/<route-key>.	Entire route key drawn again; host and other path segments kept.

URL-safe characters are A-Z, a-z, 0-9, _ and -. A credential is matched as a complete token; a route key as a complete path segment. Only the route key is replaced in an identity address.

A bridge token or a one-time code made by an earlier version has no prefix. It stays valid until it is replaced (a code, until its day ends). Latet masks it by the name it is written under, as it masks any other secret, not by a shape of its own.

Personal data

Type	How a match is confirmed
EMAIL	Top-level domain checked against the IANA list (shipped offline).
PHONE	Parsed and validated with libphonenumber; numbers without a prefix only for phone_regions. Decimals, dates, versions and digit lists are skipped.
IBAN	Country length and ISO 13616 mod-97 checksum.
CREDIT_CARD	Issuer prefix (IIN) and Luhn checksum; repeated digits are skipped.
IP_ADDRESS	Public IPv4 and IPv6 addresses (private ones too with include_private_ips); version-like numbers are skipped.
CRYPTO_WALLET	Bitcoin addresses with a valid Base58Check or bech32/bech32m checksum.
VAT_NUMBER	With the country prefix (EL for Greece, CHE for Switzerland), checked by each country’s check digits; an Italian partita IVA is IT_VAT_CODE while that type is on.

National ID and tax numbers

Recognised for the countries in id_regions (the max profile: every country). A keyword is a word such as SSN or Steuer-ID on the same line, a few characters away, or in the column header of a table. Numbers are never taken from inside longer numbers, versions, decimals or paths.

Country	Type	Number	Written	How a match is confirmed
BE	BE_NATIONAL_NUMBER	National register number (rijksregisternummer)	NN.NN.NN-NNN.NN	Birth date and mod-97 check digits. Written without separators, only next to a keyword.
CA	CA_SIN	Social Insurance Number (SIN)	NNN NNN NNN	Luhn check digit; always next to a keyword (SIN in capitals only, never sin().
CH	CH_AHV	AHV/AVS number (social security)	756.NNNN.NNNN.NN	Starts with 756; EAN-13 check digit.
DE	DE_TAX_ID	Tax ID (Steuer-IdNr)	NN NNN NNN NNN	Digit repetition rule and ISO 7064 MOD 11,10; always next to a keyword.
ES	ES_DNI	DNI (Documento Nacional de Identidad)	NNNNNNNNA	Check letter: the number modulo 23.
ES	ES_NIE	NIE (Número de Identidad de Extranjero)	ANNNNNNNA	X, Y or Z, seven digits and a check letter (modulo 23).
FI	FI_HETU	Personal identity code (henkilötunnus)	NNNNNN-NNNA	Birth date, century sign and check character (modulo 31).
FR	FR_NIR	Social security number (NIR)	N NN NN NN NNN NNN NN	Sex, birth year and month, place; mod-97 key. Written without spaces, only next to a keyword.
GB	GB_NINO	National Insurance number	AA NN NN NN A	Issued prefixes and suffix. In code, only next to a keyword.
IT	IT_FISCAL_CODE	Codice fiscale	AAAAAANNANNANNNA	Structure (letters, birth date, place) and check character.
IT	IT_VAT_CODE	Partita IVA	NNNNNNNNNNN	Check digit, with an IT prefix or a VAT word on the same line.
LV	LV_PERSONAL_CODE	Personal code (personas kods)	NNNNNN-NNNNN	Birth date (a code issued since July 2017 starts with 32 instead) and check digit. Written without the hyphen, only next to a keyword.
NL	NL_BSN	Citizen service number (BSN)	NNNN.NN.NNN	The 11 test; always next to a keyword.
PL	PL_PESEL	PESEL	NNNNNNNNNNN	Birth date and weighted check digit. In code, only next to a keyword.
PT	PT_NIF	Tax number (NIF, número de contribuinte)	NNN NNN NNN	Weighted mod-11 check digit; always next to a keyword.
SE	SE_PERSONNUMMER	Personnummer	NNNNNN-NNNN	Birth date and Luhn check digit. In code, only next to a keyword.
US	US_SSN	Social Security number	NNN-NN-NNNN	Issued area, group and serial ranges; always next to a keyword.
US	US_ITIN	Individual Taxpayer Identification Number (ITIN)	9NN-NN-NNNN	Starts with 9, issued group ranges; always next to a keyword.

VAT numbers

VAT_NUMBER, always on: written with the country prefix and confirmed by that country’s check digits. In the dashboard each match names its country, as in pii:vat-de.

Country	Prefix	Written	Rule
Austria	AT	ATUNNNNNNNN	pii:vat-at
Belgium	BE	BENNNN.NNN.NNN	pii:vat-be
Bulgaria	BG	BGNNNNNNNNN	pii:vat-bg
Cyprus	CY	CYNNNNNNNNA	pii:vat-cy
Czechia	CZ	CZNNNNNNNN	pii:vat-cz
Germany	DE	DENNNNNNNNN	pii:vat-de
Denmark	DK	DKNN NN NN NN	pii:vat-dk
Estonia	EE	EENNNNNNNNN	pii:vat-ee
Greece	EL	ELNNNNNNNNN	pii:vat-gr
Spain	ES	ESANNNNNNNA	pii:vat-es
Finland	FI	FINNNNNNNN	pii:vat-fi
France	FR	FRNN NNN NNN NNN	pii:vat-fr
Croatia	HR	HRNNNNNNNNNNN	pii:vat-hr
Hungary	HU	HUNNNNNNNN	pii:vat-hu
Ireland	IE	IENNNNNNNA	pii:vat-ie
Italy	IT	ITNNNNNNNNNNN	pii:vat-it
Lithuania	LT	LTNNNNNNNNN	pii:vat-lt
Luxembourg	LU	LUNNNNNNNN	pii:vat-lu
Latvia	LV	LVNNNNNNNNNNN	pii:vat-lv
Malta	MT	MTNNNNNNNN	pii:vat-mt
Netherlands	NL	NLNNNNNNNNNBNN	pii:vat-nl
Poland	PL	PLNNNNNNNNNN	pii:vat-pl
Portugal	PT	PTNNNNNNNNN	pii:vat-pt
Romania	RO	RONNNNNNNN	pii:vat-ro
Sweden	SE	SENNNNNNNNNN01	pii:vat-se
Slovenia	SI	SINNNNNNNN	pii:vat-si
Slovakia	SK	SKNNNNNNNNNN	pii:vat-sk
Northern Ireland	XI	XINNN NNNN NN	pii:vat-xi
United Kingdom	GB	GBNNN NNNN NN	pii:vat-gb
Switzerland	CHE	CHE-NNN.NNN.NNN	pii:vat-ch
Norway	NO	NONNNNNNNNN	pii:vat-no

Fields of tool outputs

The fields detector reads the structures of a text: psql, CSV, TSV, markdown and HTML tables, the tables of a browser’s accessibility snapshot, lines of key=value pairs, "key": value fragments, and JSON documents value by value, each with its path (items[].sku). Values of one or two characters stay in clear. A value found by its field is masked in its structure only: the same word elsewhere is left alone. See Production data.

Rule	Masks
field-secret:<field>	The value of a column or key named like a secret (password_hash, api_key, reset_token), always.
field:<name>	The values of a field one of your field rules names.
strict:<field>	In strict data mode (data: strict), any other value of a tool’s output.

Strict data mode leaves alone the output of the tools that read files: glob, grep, list_dir, list_directory, ls, notebookread, read, read_file, search_files, view, unless data_files names the file one of them returns (notebookread, read, read_file, view); and that of the web tools, unless data_tools names them or data_hosts the address: web_fetch, web_search, webfetch, websearch. The lines a tool shows of a file it changed are read as the file when data_files names it, whatever data_tools names: edit, edit_file, multiedit, notebookedit, write, write_file.

Secret rules from gitleaks

Latet ships the gitleaks v8.30.1 ruleset (222 rules, MIT license). Turn one off with disabled_secret_rules in the configuration.

Rule	Finds
1password-secret-key	Uncovered a possible 1Password secret key, potentially compromising access to secrets in vaults.
1password-service-account-token	Uncovered a possible 1Password service account token, potentially compromising access to secrets in vaults.
adafruit-api-key	Identified a potential Adafruit API Key, which could lead to unauthorized access to Adafruit services and sensitive data exposure.
adobe-client-id	Detected a pattern that resembles an Adobe OAuth Web Client ID, posing a risk of compromised Adobe integrations and data breaches.
adobe-client-secret	Discovered a potential Adobe Client Secret, which, if exposed, could allow unauthorized Adobe service access and data manipulation.
age-secret-key	Discovered a potential Age encryption tool secret key, risking data decryption and unauthorized access to sensitive information.
airtable-api-key	Uncovered a possible Airtable API Key, potentially compromising database access and leading to data leakage or alteration.
airtable-personnal-access-token	Uncovered a possible Airtable Personal AccessToken, potentially compromising database access and leading to data leakage or alteration.
algolia-api-key	Identified an Algolia API Key, which could result in unauthorized search operations and data exposure on Algolia-managed platforms.
alibaba-access-key-id	Detected an Alibaba Cloud AccessKey ID, posing a risk of unauthorized cloud resource access and potential data compromise.
alibaba-secret-key	Discovered a potential Alibaba Cloud Secret Key, potentially allowing unauthorized operations and data access within Alibaba Cloud.
anthropic-admin-api-key	Detected an Anthropic Admin API Key, risking unauthorized access to administrative functions and sensitive AI model configurations.
anthropic-api-key	Identified an Anthropic API Key, which may compromise AI assistant integrations and expose sensitive data to unauthorized access.
artifactory-api-key	Detected an Artifactory api key, posing a risk unauthorized access to the central repository.
artifactory-reference-token	Detected an Artifactory reference token, posing a risk of impersonation and unauthorized access to the central repository.
asana-client-id	Discovered a potential Asana Client ID, risking unauthorized access to Asana projects and sensitive task information.
asana-client-secret	Identified an Asana Client Secret, which could lead to compromised project management integrity and unauthorized access.
atlassian-api-token	Detected an Atlassian API token, posing a threat to project management and collaboration tool security and data confidentiality.
authress-service-client-access-key	Uncovered a possible Authress Service Client Access Key, which may compromise access control services and sensitive data.
aws-access-token	Identified a pattern that may indicate AWS credentials, risking unauthorized cloud resource access and data breaches on AWS platforms.
aws-amazon-bedrock-api-key-long-lived	Identified a pattern that may indicate long-lived Amazon Bedrock API keys, risking unauthorized Amazon Bedrock usage
aws-amazon-bedrock-api-key-short-lived	Identified a pattern that may indicate short-lived Amazon Bedrock API keys, risking unauthorized Amazon Bedrock usage
azure-ad-client-secret	Azure AD Client Secret
beamer-api-token	Detected a Beamer API token, potentially compromising content management and exposing sensitive notifications and updates.
bitbucket-client-id	Discovered a potential Bitbucket Client ID, risking unauthorized repository access and potential codebase exposure.
bitbucket-client-secret	Discovered a potential Bitbucket Client Secret, posing a risk of compromised code repositories and unauthorized access.
bittrex-access-key	Identified a Bittrex Access Key, which could lead to unauthorized access to cryptocurrency trading accounts and financial loss.
bittrex-secret-key	Detected a Bittrex Secret Key, potentially compromising cryptocurrency transactions and financial security.
cisco-meraki-api-key	Cisco Meraki is a cloud-managed IT solution that provides networking, security, and device management through an easy-to-use interface.
clickhouse-cloud-api-secret-key	Identified a pattern that may indicate clickhouse cloud API secret key, risking unauthorized clickhouse cloud api access and data breaches on ClickHouse Cloud platforms.
clojars-api-token	Uncovered a possible Clojars API token, risking unauthorized access to Clojure libraries and potential code manipulation.
cloudflare-api-key	Detected a Cloudflare API Key, potentially compromising cloud application deployments and operational security.
cloudflare-global-api-key	Detected a Cloudflare Global API Key, potentially compromising cloud application deployments and operational security.
cloudflare-origin-ca-key	Detected a Cloudflare Origin CA Key, potentially compromising cloud application deployments and operational security.
codecov-access-token	Found a pattern resembling a Codecov Access Token, posing a risk of unauthorized access to code coverage reports and sensitive data.
cohere-api-token	Identified a Cohere Token, posing a risk of unauthorized access to AI services and data manipulation.
coinbase-access-token	Detected a Coinbase Access Token, posing a risk of unauthorized access to cryptocurrency accounts and financial transactions.
confluent-access-token	Identified a Confluent Access Token, which could compromise access to streaming data platforms and sensitive data flow.
confluent-secret-key	Found a Confluent Secret Key, potentially risking unauthorized operations and data access within Confluent services.
contentful-delivery-api-token	Discovered a Contentful delivery API token, posing a risk to content management systems and data integrity.
curl-auth-header	Discovered a potential authorization token provided in a curl command header, which could compromise the curl accessed resource.
curl-auth-user	Discovered a potential basic authorization token provided in a curl command, which could compromise the curl accessed resource.
databricks-api-token	Uncovered a Databricks API token, which may compromise big data analytics platforms and sensitive data processing.
datadog-access-token	Detected a Datadog Access Token, potentially risking monitoring and analytics data exposure and manipulation.
defined-networking-api-token	Identified a Defined Networking API token, which could lead to unauthorized network operations and data breaches.
digitalocean-access-token	Found a DigitalOcean OAuth Access Token, risking unauthorized cloud resource access and data compromise.
digitalocean-pat	Discovered a DigitalOcean Personal Access Token, posing a threat to cloud infrastructure security and data privacy.
digitalocean-refresh-token	Uncovered a DigitalOcean OAuth Refresh Token, which could allow prolonged unauthorized access and resource manipulation.
discord-api-token	Detected a Discord API key, potentially compromising communication channels and user data privacy on Discord.
discord-client-id	Identified a Discord client ID, which may lead to unauthorized integrations and data exposure in Discord applications.
discord-client-secret	Discovered a potential Discord client secret, risking compromised Discord bot integrations and data leaks.
doppler-api-token	Discovered a Doppler API token, posing a risk to environment and secrets management security.
droneci-access-token	Detected a Droneci Access Token, potentially compromising continuous integration and deployment workflows.
dropbox-api-token	Identified a Dropbox API secret, which could lead to unauthorized file access and data breaches in Dropbox storage.
dropbox-long-lived-api-token	Found a Dropbox long-lived API token, risking prolonged unauthorized access to cloud storage and sensitive data.
dropbox-short-lived-api-token	Discovered a Dropbox short-lived API token, posing a risk of temporary but potentially harmful data access and manipulation.
duffel-api-token	Uncovered a Duffel API token, which may compromise travel platform integrations and sensitive customer data.
dynatrace-api-token	Detected a Dynatrace API token, potentially risking application performance monitoring and data exposure.
easypost-api-token	Identified an EasyPost API token, which could lead to unauthorized postal and shipment service access and data exposure.
easypost-test-api-token	Detected an EasyPost test API token, risking exposure of test environments and potentially sensitive shipment data.
etsy-access-token	Found an Etsy Access Token, potentially compromising Etsy shop management and customer data.
facebook-access-token	Discovered a Facebook Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposure.
facebook-page-access-token	Discovered a Facebook Page Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposure.
facebook-secret	Discovered a Facebook Application secret, posing a risk of unauthorized access to Facebook accounts and personal data exposure.
fastly-api-token	Uncovered a Fastly API key, which may compromise CDN and edge cloud services, leading to content delivery and security issues.
finicity-api-token	Detected a Finicity API token, potentially risking financial data access and unauthorized financial operations.
finicity-client-secret	Identified a Finicity Client Secret, which could lead to compromised financial service integrations and data breaches.
finnhub-access-token	Found a Finnhub Access Token, risking unauthorized access to financial market data and analytics.
flickr-access-token	Discovered a Flickr Access Token, posing a risk of unauthorized photo management and potential data leakage.
flutterwave-encryption-key	Uncovered a Flutterwave Encryption Key, which may compromise payment processing and sensitive financial information.
flutterwave-public-key	Detected a Finicity Public Key, potentially exposing public cryptographic operations and integrations.
flutterwave-secret-key	Identified a Flutterwave Secret Key, risking unauthorized financial transactions and data breaches.
flyio-access-token	Uncovered a Fly.io API key
frameio-api-token	Found a Frame.io API token, potentially compromising video collaboration and project management.
freemius-secret-key	Detected a Freemius secret key, potentially exposing sensitive information.
freshbooks-access-token	Discovered a Freshbooks Access Token, posing a risk to accounting software access and sensitive financial data exposure.
gcp-api-key	Uncovered a GCP API key, which could lead to unauthorized access to Google Cloud services and data breaches.
generic-api-key	Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
github-app-token	Identified a GitHub App Token, which may compromise GitHub application integrations and source code security.
github-fine-grained-pat	Found a GitHub Fine-Grained Personal Access Token, risking unauthorized repository access and code manipulation.
github-oauth	Discovered a GitHub OAuth Access Token, posing a risk of compromised GitHub account integrations and data leaks.
github-pat	Uncovered a GitHub Personal Access Token, potentially leading to unauthorized repository access and sensitive content exposure.
github-refresh-token	Detected a GitHub Refresh Token, which could allow prolonged unauthorized access to GitHub services.
gitlab-cicd-job-token	Identified a GitLab CI/CD Job Token, potential access to projects and some APIs on behalf of a user while the CI job is running.
gitlab-deploy-token	Identified a GitLab Deploy Token, risking access to repositories, packages and containers with write access.
gitlab-feature-flag-client-token	Identified a GitLab feature flag client token, risks exposing user lists and features flags used by an application.
gitlab-feed-token	Identified a GitLab feed token, risking exposure of user data.
gitlab-incoming-mail-token	Identified a GitLab incoming mail token, risking manipulation of data sent by mail.
gitlab-kubernetes-agent-token	Identified a GitLab Kubernetes Agent token, risking access to repos and registry of projects connected via agent.
gitlab-oauth-app-secret	Identified a GitLab OIDC Application Secret, risking access to apps using GitLab as authentication provider.
gitlab-pat	Identified a GitLab Personal Access Token, risking unauthorized access to GitLab repositories and codebase exposure.
gitlab-pat-routable	Identified a GitLab Personal Access Token (routable), risking unauthorized access to GitLab repositories and codebase exposure.
gitlab-ptt	Found a GitLab Pipeline Trigger Token, potentially compromising continuous integration workflows and project security.
gitlab-rrt	Discovered a GitLab Runner Registration Token, posing a risk to CI/CD pipeline integrity and unauthorized access.
gitlab-runner-authentication-token	Discovered a GitLab Runner Authentication Token, posing a risk to CI/CD pipeline integrity and unauthorized access.
gitlab-runner-authentication-token-routable	Discovered a GitLab Runner Authentication Token (Routable), posing a risk to CI/CD pipeline integrity and unauthorized access.
gitlab-scim-token	Discovered a GitLab SCIM Token, posing a risk to unauthorized access for a organization or instance.
gitlab-session-cookie	Discovered a GitLab Session Cookie, posing a risk to unauthorized access to a user account.
gitter-access-token	Uncovered a Gitter Access Token, which may lead to unauthorized access to chat and communication services.
gocardless-api-token	Detected a GoCardless API token, potentially risking unauthorized direct debit payment operations and financial data exposure.
grafana-api-key	Identified a Grafana API key, which could compromise monitoring dashboards and sensitive data analytics.
grafana-cloud-api-token	Found a Grafana cloud API token, risking unauthorized access to cloud-based monitoring services and data exposure.
grafana-service-account-token	Discovered a Grafana service account token, posing a risk of compromised monitoring services and data integrity.
harness-api-key	Identified a Harness Access Token (PAT or SAT), risking unauthorized access to a Harness account.
hashicorp-tf-api-token	Uncovered a HashiCorp Terraform user/org API token, which may lead to unauthorized infrastructure management and security breaches.
hashicorp-tf-password	Identified a HashiCorp Terraform password field, risking unauthorized infrastructure configuration and security breaches.
heroku-api-key	Detected a Heroku API Key, potentially compromising cloud application deployments and operational security.
heroku-api-key-v2	Detected a Heroku API Key, potentially compromising cloud application deployments and operational security.
hubspot-api-key	Found a HubSpot API Token, posing a risk to CRM data integrity and unauthorized marketing operations.
huggingface-access-token	Discovered a Hugging Face Access token, which could lead to unauthorized access to AI models and sensitive data.
huggingface-organization-api-token	Uncovered a Hugging Face Organization API token, potentially compromising AI organization accounts and associated data.
infracost-api-token	Detected an Infracost API Token, risking unauthorized access to cloud cost estimation tools and financial data.
intercom-api-key	Identified an Intercom API Token, which could compromise customer communication channels and data privacy.
intra42-client-secret	Found a Intra42 client secret, which could lead to unauthorized access to the 42School API and sensitive data.
jfrog-api-key	Found a JFrog API Key, posing a risk of unauthorized access to software artifact repositories and build pipelines.
jfrog-identity-token	Discovered a JFrog Identity Token, potentially compromising access to JFrog services and sensitive software artifacts.
jwt	Uncovered a JSON Web Token, which may lead to unauthorized access to web applications and sensitive user data.
jwt-base64	Detected a Base64-encoded JSON Web Token, posing a risk of exposing encoded authentication and data exchange information.
kraken-access-token	Identified a Kraken Access Token, potentially compromising cryptocurrency trading accounts and financial security.
kubernetes-secret-yaml	Possible Kubernetes Secret detected, posing a risk of leaking credentials/tokens from your deployments
kucoin-access-token	Found a Kucoin Access Token, risking unauthorized access to cryptocurrency exchange services and transactions.
kucoin-secret-key	Discovered a Kucoin Secret Key, which could lead to compromised cryptocurrency operations and financial data breaches.
launchdarkly-access-token	Uncovered a Launchdarkly Access Token, potentially compromising feature flag management and application functionality.
linear-api-key	Detected a Linear API Token, posing a risk to project management tools and sensitive task data.
linear-client-secret	Identified a Linear Client Secret, which may compromise secure integrations and sensitive project management data.
linkedin-client-id	Found a LinkedIn Client ID, risking unauthorized access to LinkedIn integrations and professional data exposure.
linkedin-client-secret	Discovered a LinkedIn Client secret, potentially compromising LinkedIn application integrations and user data.
lob-api-key	Uncovered a Lob API Key, which could lead to unauthorized access to mailing and address verification services.
lob-pub-api-key	Detected a Lob Publishable API Key, posing a risk of exposing mail and print service integrations.
looker-client-id	Found a Looker Client ID, risking unauthorized access to a Looker account and exposing sensitive data.
looker-client-secret	Found a Looker Client Secret, risking unauthorized access to a Looker account and exposing sensitive data.
mailchimp-api-key	Identified a Mailchimp API key, potentially compromising email marketing campaigns and subscriber data.
mailgun-private-api-token	Found a Mailgun private API token, risking unauthorized email service operations and data breaches.
mailgun-pub-key	Discovered a Mailgun public validation key, which could expose email verification processes and associated data.
mailgun-signing-key	Uncovered a Mailgun webhook signing key, potentially compromising email automation and data integrity.
mapbox-api-token	Detected a MapBox API token, posing a risk to geospatial services and sensitive location data exposure.
mattermost-access-token	Identified a Mattermost Access Token, which may compromise team communication channels and data privacy.
maxmind-license-key	Discovered a potential MaxMind license key.
messagebird-api-token	Found a MessageBird API token, risking unauthorized access to communication platforms and message data.
messagebird-client-id	Discovered a MessageBird client ID, potentially compromising API integrations and sensitive communication data.
microsoft-teams-webhook	Uncovered a Microsoft Teams Webhook, which could lead to unauthorized access to team collaboration tools and data leaks.
netlify-access-token	Detected a Netlify Access Token, potentially compromising web hosting services and site management.
new-relic-browser-api-token	Identified a New Relic ingest browser API token, risking unauthorized access to application performance data and analytics.
new-relic-insert-key	Discovered a New Relic insight insert key, compromising data injection into the platform.
new-relic-user-api-id	Found a New Relic user API ID, posing a risk to application monitoring services and data integrity.
new-relic-user-api-key	Discovered a New Relic user API Key, which could lead to compromised application insights and performance monitoring.
notion-api-token	Notion API token
npm-access-token	Uncovered an npm access token, potentially compromising package management and code repository access.
nuget-config-password	Identified a password within a Nuget config file, potentially compromising package management access.
nytimes-access-token	Detected a Nytimes Access Token, risking unauthorized access to New York Times APIs and content services.
octopus-deploy-api-key	Discovered a potential Octopus Deploy API key, risking application deployments and operational security.
okta-access-token	Identified an Okta Access Token, which may compromise identity management services and user authentication data.
openai-api-key	Found an OpenAI API Key, posing a risk of unauthorized access to AI services and data manipulation.
openshift-user-token	Found an OpenShift user token, potentially compromising an OpenShift/Kubernetes cluster.
perplexity-api-key	Detected a Perplexity API key, which could lead to unauthorized access to Perplexity AI services and data exposure.
pkcs12-file	Found a PKCS #12 file, which commonly contain bundled private keys.
plaid-api-token	Discovered a Plaid API Token, potentially compromising financial data aggregation and banking services.
plaid-client-id	Uncovered a Plaid Client ID, which could lead to unauthorized financial service integrations and data breaches.
plaid-secret-key	Detected a Plaid Secret key, risking unauthorized access to financial accounts and sensitive transaction data.
planetscale-api-token	Identified a PlanetScale API token, potentially compromising database management and operations.
planetscale-oauth-token	Found a PlanetScale OAuth token, posing a risk to database access control and sensitive data integrity.
planetscale-password	Discovered a PlanetScale password, which could lead to unauthorized database operations and data breaches.
postman-api-token	Uncovered a Postman API token, potentially compromising API testing and development workflows.
prefect-api-token	Detected a Prefect API token, risking unauthorized access to workflow management and automation services.
private-key	Identified a Private Key, which may compromise cryptographic security and sensitive data encryption.
privateai-api-token	Identified a PrivateAI Token, posing a risk of unauthorized access to AI services and data manipulation.
pulumi-api-token	Found a Pulumi API token, posing a risk to infrastructure as code services and cloud resource management.
pypi-upload-token	Discovered a PyPI upload token, potentially compromising Python package distribution and repository integrity.
rapidapi-access-token	Uncovered a RapidAPI Access Token, which could lead to unauthorized access to various APIs and data services.
readme-api-token	Detected a Readme API token, risking unauthorized documentation management and content exposure.
rubygems-api-token	Identified a Rubygem API token, potentially compromising Ruby library distribution and package management.
scalingo-api-token	Found a Scalingo API token, posing a risk to cloud platform services and application deployment security.
sendbird-access-id	Discovered a Sendbird Access ID, which could compromise chat and messaging platform integrations.
sendbird-access-token	Uncovered a Sendbird Access Token, potentially risking unauthorized access to communication services and user data.
sendgrid-api-token	Detected a SendGrid API token, posing a risk of unauthorized email service operations and data exposure.
sendinblue-api-token	Identified a Sendinblue API token, which may compromise email marketing services and subscriber data privacy.
sentry-access-token	Found a Sentry.io Access Token (old format), risking unauthorized access to error tracking services and sensitive application data.
sentry-org-token	Found a Sentry.io Organization Token, risking unauthorized access to error tracking services and sensitive application data.
sentry-user-token	Found a Sentry.io User Token, risking unauthorized access to error tracking services and sensitive application data.
settlemint-application-access-token	Found a Settlemint Application Access Token.
settlemint-personal-access-token	Found a Settlemint Personal Access Token.
settlemint-service-access-token	Found a Settlemint Service Access Token.
shippo-api-token	Discovered a Shippo API token, potentially compromising shipping services and customer order data.
shopify-access-token	Uncovered a Shopify access token, which could lead to unauthorized e-commerce platform access and data breaches.
shopify-custom-access-token	Detected a Shopify custom access token, potentially compromising custom app integrations and e-commerce data security.
shopify-private-app-access-token	Identified a Shopify private app access token, risking unauthorized access to private app data and store operations.
shopify-shared-secret	Found a Shopify shared secret, posing a risk to application authentication and e-commerce platform security.
sidekiq-secret	Discovered a Sidekiq Secret, which could lead to compromised background job processing and application data breaches.
sidekiq-sensitive-url	Uncovered a Sidekiq Sensitive URL, potentially exposing internal job queues and sensitive operation details.
slack-app-token	Detected a Slack App-level token, risking unauthorized access to Slack applications and workspace data.
slack-bot-token	Identified a Slack Bot token, which may compromise bot integrations and communication channel security.
slack-config-access-token	Found a Slack Configuration access token, posing a risk to workspace configuration and sensitive data access.
slack-config-refresh-token	Discovered a Slack Configuration refresh token, potentially allowing prolonged unauthorized access to configuration settings.
slack-legacy-bot-token	Uncovered a Slack Legacy bot token, which could lead to compromised legacy bot operations and data exposure.
slack-legacy-token	Detected a Slack Legacy token, risking unauthorized access to older Slack integrations and user data.
slack-legacy-workspace-token	Identified a Slack Legacy Workspace token, potentially compromising access to workspace data and legacy features.
slack-user-token	Found a Slack User token, posing a risk of unauthorized user impersonation and data access within Slack workspaces.
slack-webhook-url	Discovered a Slack Webhook, which could lead to unauthorized message posting and data leakage in Slack channels.
snyk-api-token	Uncovered a Snyk API token, potentially compromising software vulnerability scanning and code security.
sonar-api-token	Uncovered a Sonar API token, potentially compromising software vulnerability scanning and code security.
sourcegraph-access-token	Sourcegraph is a code search and navigation engine.
square-access-token	Detected a Square Access Token, risking unauthorized payment processing and financial transaction exposure.
squarespace-access-token	Identified a Squarespace Access Token, which may compromise website management and content control on Squarespace.
stripe-access-token	Found a Stripe Access Token, posing a risk to payment processing services and sensitive financial data.
sumologic-access-id	Discovered a SumoLogic Access ID, potentially compromising log management services and data analytics integrity.
sumologic-access-token	Uncovered a SumoLogic Access Token, which could lead to unauthorized access to log data and analytics insights.
telegram-bot-api-token	Detected a Telegram Bot API Token, risking unauthorized bot operations and message interception on Telegram.
travisci-access-token	Identified a Travis CI Access Token, potentially compromising continuous integration services and codebase security.
twilio-api-key	Found a Twilio API Key, posing a risk to communication services and sensitive customer interaction data.
twitch-api-token	Discovered a Twitch API token, which could compromise streaming services and account integrations.
twitter-access-secret	Uncovered a Twitter Access Secret, potentially risking unauthorized Twitter integrations and data breaches.
twitter-access-token	Detected a Twitter Access Token, posing a risk of unauthorized account operations and social media data exposure.
twitter-api-key	Identified a Twitter API Key, which may compromise Twitter application integrations and user data security.
twitter-api-secret	Found a Twitter API Secret, risking the security of Twitter app integrations and sensitive data access.
twitter-bearer-token	Discovered a Twitter Bearer Token, potentially compromising API access and data retrieval from Twitter.
typeform-api-token	Uncovered a Typeform API token, which could lead to unauthorized survey management and data collection.
vault-batch-token	Detected a Vault Batch Token, risking unauthorized access to secret management services and sensitive data.
vault-service-token	Identified a Vault Service Token, potentially compromising infrastructure security and access to sensitive credentials.
yandex-access-token	Found a Yandex Access Token, posing a risk to Yandex service integrations and user data privacy.
yandex-api-key	Discovered a Yandex API Key, which could lead to unauthorized access to Yandex services and data manipulation.
yandex-aws-access-token	Uncovered a Yandex AWS Access Token, potentially compromising cloud resource access and data security on Yandex Cloud.
zendesk-secret-key	Detected a Zendesk Secret Key, risking unauthorized access to customer support services and sensitive ticketing data.