Detectors

Every request passes through these detectors, in this order of priority when two find the same text: secrets first, then your terms and this machine’s identity, then personal data. A detector marked fail-closed stops the request if it fails, rather than letting text through unchecked.

Detector	Finds	Kind	Profiles	If it fails
latet-credentials	Latet personal tokens, computer keys, API keys and administration tokens, and route keys in HTTPS identity addresses.	secret	all	fail-closed
gitleaks	API keys and tokens of known services, with the gitleaks ruleset: patterns, keywords, entropy thresholds and allowlists as gitleaks applies them.	secret	all	fail-closed
assignment	Values assigned to sensitive names (DB_PASSWORD=…, "api_key": "…", $env:TOKEN = …).	secret	all	fail-closed
private-key	The whole body of a PEM/OpenSSH/PGP private key block (header and footer stay visible).	secret	all	fail-closed
credentials	Passwords in scheme://user:pass@host, JWTs and bearer/basic credentials.	secret	all	fail-closed
fields	Values by the field they sit in: secret names, your field rules and strict data mode.	secret; your fields; data values	all	fail-closed
pii	Structured personal data, each match validated (checksums, number plans, the IANA TLD list).	personal data	balanced, max	skipped, request flagged
terms	The user’s deny-list (client names, project code names, internal domains…).	your terms	all (when you add terms)	fail-closed
identity	This machine’s identity: the OS user inside home paths, the host name, the git author and its company’s domain.	identity	balanced, max	fail-closed
known-values	Every original already in the vault, matched exactly wherever it appears again.	any	all	fail-closed

Latet credentials

These built-in secret types apply in every profile, on a computer and in a server space. They use the same policies, allow lists, conversation restoration and outbound-tool checks as other secrets.

Type	Recognised value	Fake
LATET_PERSONAL_TOKEN	latet_pat_ followed by 43 URL-safe characters.	Public prefix and length kept; secret tail drawn again.
LATET_COMPUTER_KEY	latet_ck_ followed by 43 URL-safe characters.	Public prefix and length kept; secret tail drawn again.
LATET_API_KEY	latet_key_ followed by 43 URL-safe characters.	Public prefix and length kept; secret tail drawn again.
LATET_ADMIN_TOKEN	latet_adm_ followed by 43 URL-safe characters.	Public prefix and length kept; secret tail drawn again.
LATET_ROUTE_KEY	The 16 to 128 URL-safe characters after /u/ in https://<host>/u/<route-key>.	Entire route key drawn again; host and other path segments kept.

URL-safe characters are A-Z, a-z, 0-9, _ and -. A credential is matched as a complete token; a route key as a complete path segment. Only the route key is replaced in an identity address.

Personal data

Type	How a match is confirmed
EMAIL	Top-level domain checked against the IANA list (shipped offline).
PHONE	Parsed and validated with libphonenumber; numbers without a prefix only for phone_regions. Decimals, dates, versions and digit lists are skipped.
IBAN	Country length and ISO 13616 mod-97 checksum.
CREDIT_CARD	Issuer prefix (IIN) and Luhn checksum; repeated digits are skipped.
IP_ADDRESS	Public IPv4 and IPv6 addresses (private ones too with include_private_ips); version-like numbers are skipped.
CRYPTO_WALLET	Bitcoin addresses with a valid Base58Check or bech32/bech32m checksum.
VAT_NUMBER	With the country prefix (EL for Greece, CHE for Switzerland), checked by each country’s check digits; an Italian partita IVA is IT_VAT_CODE while that type is on.

National ID and tax numbers

Recognised for the countries in id_regions (the max profile: every country). A keyword is a word such as SSN or Steuer-ID on the same line, a few characters away, or in the column header of a table. Numbers are never taken from inside longer numbers, versions, decimals or paths.

Country	Type	Number	Written	How a match is confirmed
BE	BE_NATIONAL_NUMBER	National register number (rijksregisternummer)	NN.NN.NN-NNN.NN	Birth date and mod-97 check digits. Written without separators, only next to a keyword.
CA	CA_SIN	Social Insurance Number (SIN)	NNN NNN NNN	Luhn check digit; always next to a keyword (SIN in capitals only, never sin().
CH	CH_AHV	AHV/AVS number (social security)	756.NNNN.NNNN.NN	Starts with 756; EAN-13 check digit.
DE	DE_TAX_ID	Tax ID (Steuer-IdNr)	NN NNN NNN NNN	Digit repetition rule and ISO 7064 MOD 11,10; always next to a keyword.
ES	ES_DNI	DNI (Documento Nacional de Identidad)	NNNNNNNNA	Check letter: the number modulo 23.
ES	ES_NIE	NIE (Número de Identidad de Extranjero)	ANNNNNNNA	X, Y or Z, seven digits and a check letter (modulo 23).
FI	FI_HETU	Personal identity code (henkilötunnus)	NNNNNN-NNNA	Birth date, century sign and check character (modulo 31).
FR	FR_NIR	Social security number (NIR)	N NN NN NN NNN NNN NN	Sex, birth year and month, place; mod-97 key. Written without spaces, only next to a keyword.
GB	GB_NINO	National Insurance number	AA NN NN NN A	Issued prefixes and suffix. In code, only next to a keyword.
IT	IT_FISCAL_CODE	Codice fiscale	AAAAAANNANNANNNA	Structure (letters, birth date, place) and check character.
IT	IT_VAT_CODE	Partita IVA	NNNNNNNNNNN	Check digit, with an IT prefix or a VAT word on the same line.
LV	LV_PERSONAL_CODE	Personal code (personas kods)	NNNNNN-NNNNN	Birth date (a code issued since July 2017 starts with 32 instead) and check digit. Written without the hyphen, only next to a keyword.
NL	NL_BSN	Citizen service number (BSN)	NNNN.NN.NNN	The 11 test; always next to a keyword.
PL	PL_PESEL	PESEL	NNNNNNNNNNN	Birth date and weighted check digit. In code, only next to a keyword.
PT	PT_NIF	Tax number (NIF, número de contribuinte)	NNN NNN NNN	Weighted mod-11 check digit; always next to a keyword.
SE	SE_PERSONNUMMER	Personnummer	NNNNNN-NNNN	Birth date and Luhn check digit. In code, only next to a keyword.
US	US_SSN	Social Security number	NNN-NN-NNNN	Issued area, group and serial ranges; always next to a keyword.
US	US_ITIN	Individual Taxpayer Identification Number (ITIN)	9NN-NN-NNNN	Starts with 9, issued group ranges; always next to a keyword.

VAT numbers

VAT_NUMBER, always on: written with the country prefix and confirmed by that country’s check digits. In the dashboard each match names its country, as in pii:vat-de.

Country	Prefix	Written	Rule
Austria	AT	ATUNNNNNNNN	pii:vat-at
Belgium	BE	BENNNN.NNN.NNN	pii:vat-be
Bulgaria	BG	BGNNNNNNNNN	pii:vat-bg
Cyprus	CY	CYNNNNNNNNA	pii:vat-cy
Czechia	CZ	CZNNNNNNNN	pii:vat-cz
Germany	DE	DENNNNNNNNN	pii:vat-de
Denmark	DK	DKNN NN NN NN	pii:vat-dk
Estonia	EE	EENNNNNNNNN	pii:vat-ee
Greece	EL	ELNNNNNNNNN	pii:vat-gr
Spain	ES	ESANNNNNNNA	pii:vat-es
Finland	FI	FINNNNNNNN	pii:vat-fi
France	FR	FRNN NNN NNN NNN	pii:vat-fr
Croatia	HR	HRNNNNNNNNNNN	pii:vat-hr
Hungary	HU	HUNNNNNNNN	pii:vat-hu
Ireland	IE	IENNNNNNNA	pii:vat-ie
Italy	IT	ITNNNNNNNNNNN	pii:vat-it
Lithuania	LT	LTNNNNNNNNN	pii:vat-lt
Luxembourg	LU	LUNNNNNNNN	pii:vat-lu
Latvia	LV	LVNNNNNNNNNNN	pii:vat-lv
Malta	MT	MTNNNNNNNN	pii:vat-mt
Netherlands	NL	NLNNNNNNNNNBNN	pii:vat-nl
Poland	PL	PLNNNNNNNNNN	pii:vat-pl
Portugal	PT	PTNNNNNNNNN	pii:vat-pt
Romania	RO	RONNNNNNNN	pii:vat-ro
Sweden	SE	SENNNNNNNNNN01	pii:vat-se
Slovenia	SI	SINNNNNNNN	pii:vat-si
Slovakia	SK	SKNNNNNNNNNN	pii:vat-sk
Northern Ireland	XI	XINNN NNNN NN	pii:vat-xi
United Kingdom	GB	GBNNN NNNN NN	pii:vat-gb
Switzerland	CHE	CHE-NNN.NNN.NNN	pii:vat-ch
Norway	NO	NONNNNNNNNN	pii:vat-no

Fields of tool outputs

The fields detector reads the structures of a text: psql, CSV, TSV, markdown and HTML tables, the tables of a browser’s accessibility snapshot, lines of key=value pairs, "key": value fragments, and JSON documents value by value, each with its path (items[].sku). Values of one or two characters stay in clear. A value found by its field is masked in its structure only: the same word elsewhere is left alone. See Production data.

Rule	Masks
field-secret:<field>	The value of a column or key named like a secret (password_hash, api_key, reset_token), always.
field:<name>	The values of a field one of your field rules names.
strict:<field>	In strict data mode (data: strict), any other value of a tool’s output.

Strict data mode leaves alone the output of the tools that read files: glob, grep, list_dir, list_directory, ls, notebookread, read, read_file, search_files, view, unless data_files names the file one of them returns (notebookread, read, read_file, view); and that of the web tools, unless data_tools names them or data_hosts the address: web_fetch, web_search, webfetch, websearch. The lines a tool shows of a file it changed are read as the file when data_files names it, whatever data_tools names: edit, edit_file, multiedit, notebookedit, write, write_file.

Secret rules from gitleaks

Latet ships the gitleaks v8.30.1 ruleset (222 rules, MIT license). Turn one off with disabled_secret_rules in the configuration.

Rule	Finds
1password-secret-key	Uncovered a possible 1Password secret key, potentially compromising access to secrets in vaults.
1password-service-account-token	Uncovered a possible 1Password service account token, potentially compromising access to secrets in vaults.
adafruit-api-key	Identified a potential Adafruit API Key, which could lead to unauthorized access to Adafruit services and sensitive data exposure.
adobe-client-id	Detected a pattern that resembles an Adobe OAuth Web Client ID, posing a risk of compromised Adobe integrations and data breaches.
adobe-client-secret	Discovered a potential Adobe Client Secret, which, if exposed, could allow unauthorized Adobe service access and data manipulation.
age-secret-key	Discovered a potential Age encryption tool secret key, risking data decryption and unauthorized access to sensitive information.
airtable-api-key	Uncovered a possible Airtable API Key, potentially compromising database access and leading to data leakage or alteration.
airtable-personnal-access-token	Uncovered a possible Airtable Personal AccessToken, potentially compromising database access and leading to data leakage or alteration.
algolia-api-key	Identified an Algolia API Key, which could result in unauthorized search operations and data exposure on Algolia-managed platforms.
alibaba-access-key-id	Detected an Alibaba Cloud AccessKey ID, posing a risk of unauthorized cloud resource access and potential data compromise.
alibaba-secret-key	Discovered a potential Alibaba Cloud Secret Key, potentially allowing unauthorized operations and data access within Alibaba Cloud.
anthropic-admin-api-key	Detected an Anthropic Admin API Key, risking unauthorized access to administrative functions and sensitive AI model configurations.
anthropic-api-key	Identified an Anthropic API Key, which may compromise AI assistant integrations and expose sensitive data to unauthorized access.
artifactory-api-key	Detected an Artifactory api key, posing a risk unauthorized access to the central repository.
artifactory-reference-token	Detected an Artifactory reference token, posing a risk of impersonation and unauthorized access to the central repository.
asana-client-id	Discovered a potential Asana Client ID, risking unauthorized access to Asana projects and sensitive task information.
asana-client-secret	Identified an Asana Client Secret, which could lead to compromised project management integrity and unauthorized access.
atlassian-api-token	Detected an Atlassian API token, posing a threat to project management and collaboration tool security and data confidentiality.
authress-service-client-access-key	Uncovered a possible Authress Service Client Access Key, which may compromise access control services and sensitive data.
aws-access-token	Identified a pattern that may indicate AWS credentials, risking unauthorized cloud resource access and data breaches on AWS platforms.
aws-amazon-bedrock-api-key-long-lived	Identified a pattern that may indicate long-lived Amazon Bedrock API keys, risking unauthorized Amazon Bedrock usage
aws-amazon-bedrock-api-key-short-lived	Identified a pattern that may indicate short-lived Amazon Bedrock API keys, risking unauthorized Amazon Bedrock usage
azure-ad-client-secret	Azure AD Client Secret
beamer-api-token	Detected a Beamer API token, potentially compromising content management and exposing sensitive notifications and updates.
bitbucket-client-id	Discovered a potential Bitbucket Client ID, risking unauthorized repository access and potential codebase exposure.
bitbucket-client-secret	Discovered a potential Bitbucket Client Secret, posing a risk of compromised code repositories and unauthorized access.
bittrex-access-key	Identified a Bittrex Access Key, which could lead to unauthorized access to cryptocurrency trading accounts and financial loss.
bittrex-secret-key	Detected a Bittrex Secret Key, potentially compromising cryptocurrency transactions and financial security.
cisco-meraki-api-key	Cisco Meraki is a cloud-managed IT solution that provides networking, security, and device management through an easy-to-use interface.
clickhouse-cloud-api-secret-key	Identified a pattern that may indicate clickhouse cloud API secret key, risking unauthorized clickhouse cloud api access and data breaches on ClickHouse Cloud platforms.
clojars-api-token	Uncovered a possible Clojars API token, risking unauthorized access to Clojure libraries and potential code manipulation.
cloudflare-api-key	Detected a Cloudflare API Key, potentially compromising cloud application deployments and operational security.
cloudflare-global-api-key	Detected a Cloudflare Global API Key, potentially compromising cloud application deployments and operational security.
cloudflare-origin-ca-key	Detected a Cloudflare Origin CA Key, potentially compromising cloud application deployments and operational security.
codecov-access-token	Found a pattern resembling a Codecov Access Token, posing a risk of unauthorized access to code coverage reports and sensitive data.
cohere-api-token	Identified a Cohere Token, posing a risk of unauthorized access to AI services and data manipulation.
coinbase-access-token	Detected a Coinbase Access Token, posing a risk of unauthorized access to cryptocurrency accounts and financial transactions.
confluent-access-token	Identified a Confluent Access Token, which could compromise access to streaming data platforms and sensitive data flow.
confluent-secret-key	Found a Confluent Secret Key, potentially risking unauthorized operations and data access within Confluent services.
contentful-delivery-api-token	Discovered a Contentful delivery API token, posing a risk to content management systems and data integrity.
curl-auth-header	Discovered a potential authorization token provided in a curl command header, which could compromise the curl accessed resource.
curl-auth-user	Discovered a potential basic authorization token provided in a curl command, which could compromise the curl accessed resource.
databricks-api-token	Uncovered a Databricks API token, which may compromise big data analytics platforms and sensitive data processing.
datadog-access-token	Detected a Datadog Access Token, potentially risking monitoring and analytics data exposure and manipulation.
defined-networking-api-token	Identified a Defined Networking API token, which could lead to unauthorized network operations and data breaches.
digitalocean-access-token	Found a DigitalOcean OAuth Access Token, risking unauthorized cloud resource access and data compromise.
digitalocean-pat	Discovered a DigitalOcean Personal Access Token, posing a threat to cloud infrastructure security and data privacy.
digitalocean-refresh-token	Uncovered a DigitalOcean OAuth Refresh Token, which could allow prolonged unauthorized access and resource manipulation.
discord-api-token	Detected a Discord API key, potentially compromising communication channels and user data privacy on Discord.
discord-client-id	Identified a Discord client ID, which may lead to unauthorized integrations and data exposure in Discord applications.
discord-client-secret	Discovered a potential Discord client secret, risking compromised Discord bot integrations and data leaks.
doppler-api-token	Discovered a Doppler API token, posing a risk to environment and secrets management security.
droneci-access-token	Detected a Droneci Access Token, potentially compromising continuous integration and deployment workflows.
dropbox-api-token	Identified a Dropbox API secret, which could lead to unauthorized file access and data breaches in Dropbox storage.
dropbox-long-lived-api-token	Found a Dropbox long-lived API token, risking prolonged unauthorized access to cloud storage and sensitive data.
dropbox-short-lived-api-token	Discovered a Dropbox short-lived API token, posing a risk of temporary but potentially harmful data access and manipulation.
duffel-api-token	Uncovered a Duffel API token, which may compromise travel platform integrations and sensitive customer data.
dynatrace-api-token	Detected a Dynatrace API token, potentially risking application performance monitoring and data exposure.
easypost-api-token	Identified an EasyPost API token, which could lead to unauthorized postal and shipment service access and data exposure.
easypost-test-api-token	Detected an EasyPost test API token, risking exposure of test environments and potentially sensitive shipment data.
etsy-access-token	Found an Etsy Access Token, potentially compromising Etsy shop management and customer data.
facebook-access-token	Discovered a Facebook Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposure.
facebook-page-access-token	Discovered a Facebook Page Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposure.
facebook-secret	Discovered a Facebook Application secret, posing a risk of unauthorized access to Facebook accounts and personal data exposure.
fastly-api-token	Uncovered a Fastly API key, which may compromise CDN and edge cloud services, leading to content delivery and security issues.
finicity-api-token	Detected a Finicity API token, potentially risking financial data access and unauthorized financial operations.
finicity-client-secret	Identified a Finicity Client Secret, which could lead to compromised financial service integrations and data breaches.
finnhub-access-token	Found a Finnhub Access Token, risking unauthorized access to financial market data and analytics.
flickr-access-token	Discovered a Flickr Access Token, posing a risk of unauthorized photo management and potential data leakage.
flutterwave-encryption-key	Uncovered a Flutterwave Encryption Key, which may compromise payment processing and sensitive financial information.
flutterwave-public-key	Detected a Finicity Public Key, potentially exposing public cryptographic operations and integrations.
flutterwave-secret-key	Identified a Flutterwave Secret Key, risking unauthorized financial transactions and data breaches.
flyio-access-token	Uncovered a Fly.io API key
frameio-api-token	Found a Frame.io API token, potentially compromising video collaboration and project management.
freemius-secret-key	Detected a Freemius secret key, potentially exposing sensitive information.
freshbooks-access-token	Discovered a Freshbooks Access Token, posing a risk to accounting software access and sensitive financial data exposure.
gcp-api-key	Uncovered a GCP API key, which could lead to unauthorized access to Google Cloud services and data breaches.
generic-api-key	Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
github-app-token	Identified a GitHub App Token, which may compromise GitHub application integrations and source code security.
github-fine-grained-pat	Found a GitHub Fine-Grained Personal Access Token, risking unauthorized repository access and code manipulation.
github-oauth	Discovered a GitHub OAuth Access Token, posing a risk of compromised GitHub account integrations and data leaks.
github-pat	Uncovered a GitHub Personal Access Token, potentially leading to unauthorized repository access and sensitive content exposure.
github-refresh-token	Detected a GitHub Refresh Token, which could allow prolonged unauthorized access to GitHub services.
gitlab-cicd-job-token	Identified a GitLab CI/CD Job Token, potential access to projects and some APIs on behalf of a user while the CI job is running.
gitlab-deploy-token	Identified a GitLab Deploy Token, risking access to repositories, packages and containers with write access.
gitlab-feature-flag-client-token	Identified a GitLab feature flag client token, risks exposing user lists and features flags used by an application.
gitlab-feed-token	Identified a GitLab feed token, risking exposure of user data.
gitlab-incoming-mail-token	Identified a GitLab incoming mail token, risking manipulation of data sent by mail.
gitlab-kubernetes-agent-token	Identified a GitLab Kubernetes Agent token, risking access to repos and registry of projects connected via agent.
gitlab-oauth-app-secret	Identified a GitLab OIDC Application Secret, risking access to apps using GitLab as authentication provider.
gitlab-pat	Identified a GitLab Personal Access Token, risking unauthorized access to GitLab repositories and codebase exposure.
gitlab-pat-routable	Identified a GitLab Personal Access Token (routable), risking unauthorized access to GitLab repositories and codebase exposure.
gitlab-ptt	Found a GitLab Pipeline Trigger Token, potentially compromising continuous integration workflows and project security.
gitlab-rrt	Discovered a GitLab Runner Registration Token, posing a risk to CI/CD pipeline integrity and unauthorized access.
gitlab-runner-authentication-token	Discovered a GitLab Runner Authentication Token, posing a risk to CI/CD pipeline integrity and unauthorized access.
gitlab-runner-authentication-token-routable	Discovered a GitLab Runner Authentication Token (Routable), posing a risk to CI/CD pipeline integrity and unauthorized access.
gitlab-scim-token	Discovered a GitLab SCIM Token, posing a risk to unauthorized access for a organization or instance.
gitlab-session-cookie	Discovered a GitLab Session Cookie, posing a risk to unauthorized access to a user account.
gitter-access-token	Uncovered a Gitter Access Token, which may lead to unauthorized access to chat and communication services.
gocardless-api-token	Detected a GoCardless API token, potentially risking unauthorized direct debit payment operations and financial data exposure.
grafana-api-key	Identified a Grafana API key, which could compromise monitoring dashboards and sensitive data analytics.
grafana-cloud-api-token	Found a Grafana cloud API token, risking unauthorized access to cloud-based monitoring services and data exposure.
grafana-service-account-token	Discovered a Grafana service account token, posing a risk of compromised monitoring services and data integrity.
harness-api-key	Identified a Harness Access Token (PAT or SAT), risking unauthorized access to a Harness account.
hashicorp-tf-api-token	Uncovered a HashiCorp Terraform user/org API token, which may lead to unauthorized infrastructure management and security breaches.
hashicorp-tf-password	Identified a HashiCorp Terraform password field, risking unauthorized infrastructure configuration and security breaches.
heroku-api-key	Detected a Heroku API Key, potentially compromising cloud application deployments and operational security.
heroku-api-key-v2	Detected a Heroku API Key, potentially compromising cloud application deployments and operational security.
hubspot-api-key	Found a HubSpot API Token, posing a risk to CRM data integrity and unauthorized marketing operations.
huggingface-access-token	Discovered a Hugging Face Access token, which could lead to unauthorized access to AI models and sensitive data.
huggingface-organization-api-token	Uncovered a Hugging Face Organization API token, potentially compromising AI organization accounts and associated data.
infracost-api-token	Detected an Infracost API Token, risking unauthorized access to cloud cost estimation tools and financial data.
intercom-api-key	Identified an Intercom API Token, which could compromise customer communication channels and data privacy.
intra42-client-secret	Found a Intra42 client secret, which could lead to unauthorized access to the 42School API and sensitive data.
jfrog-api-key	Found a JFrog API Key, posing a risk of unauthorized access to software artifact repositories and build pipelines.
jfrog-identity-token	Discovered a JFrog Identity Token, potentially compromising access to JFrog services and sensitive software artifacts.
jwt	Uncovered a JSON Web Token, which may lead to unauthorized access to web applications and sensitive user data.
jwt-base64	Detected a Base64-encoded JSON Web Token, posing a risk of exposing encoded authentication and data exchange information.
kraken-access-token	Identified a Kraken Access Token, potentially compromising cryptocurrency trading accounts and financial security.
kubernetes-secret-yaml	Possible Kubernetes Secret detected, posing a risk of leaking credentials/tokens from your deployments
kucoin-access-token	Found a Kucoin Access Token, risking unauthorized access to cryptocurrency exchange services and transactions.
kucoin-secret-key	Discovered a Kucoin Secret Key, which could lead to compromised cryptocurrency operations and financial data breaches.
launchdarkly-access-token	Uncovered a Launchdarkly Access Token, potentially compromising feature flag management and application functionality.
linear-api-key	Detected a Linear API Token, posing a risk to project management tools and sensitive task data.
linear-client-secret	Identified a Linear Client Secret, which may compromise secure integrations and sensitive project management data.
linkedin-client-id	Found a LinkedIn Client ID, risking unauthorized access to LinkedIn integrations and professional data exposure.
linkedin-client-secret	Discovered a LinkedIn Client secret, potentially compromising LinkedIn application integrations and user data.
lob-api-key	Uncovered a Lob API Key, which could lead to unauthorized access to mailing and address verification services.
lob-pub-api-key	Detected a Lob Publishable API Key, posing a risk of exposing mail and print service integrations.
looker-client-id	Found a Looker Client ID, risking unauthorized access to a Looker account and exposing sensitive data.
looker-client-secret	Found a Looker Client Secret, risking unauthorized access to a Looker account and exposing sensitive data.
mailchimp-api-key	Identified a Mailchimp API key, potentially compromising email marketing campaigns and subscriber data.
mailgun-private-api-token	Found a Mailgun private API token, risking unauthorized email service operations and data breaches.
mailgun-pub-key	Discovered a Mailgun public validation key, which could expose email verification processes and associated data.
mailgun-signing-key	Uncovered a Mailgun webhook signing key, potentially compromising email automation and data integrity.
mapbox-api-token	Detected a MapBox API token, posing a risk to geospatial services and sensitive location data exposure.
mattermost-access-token	Identified a Mattermost Access Token, which may compromise team communication channels and data privacy.
maxmind-license-key	Discovered a potential MaxMind license key.
messagebird-api-token	Found a MessageBird API token, risking unauthorized access to communication platforms and message data.
messagebird-client-id	Discovered a MessageBird client ID, potentially compromising API integrations and sensitive communication data.
microsoft-teams-webhook	Uncovered a Microsoft Teams Webhook, which could lead to unauthorized access to team collaboration tools and data leaks.
netlify-access-token	Detected a Netlify Access Token, potentially compromising web hosting services and site management.
new-relic-browser-api-token	Identified a New Relic ingest browser API token, risking unauthorized access to application performance data and analytics.
new-relic-insert-key	Discovered a New Relic insight insert key, compromising data injection into the platform.
new-relic-user-api-id	Found a New Relic user API ID, posing a risk to application monitoring services and data integrity.
new-relic-user-api-key	Discovered a New Relic user API Key, which could lead to compromised application insights and performance monitoring.
notion-api-token	Notion API token
npm-access-token	Uncovered an npm access token, potentially compromising package management and code repository access.
nuget-config-password	Identified a password within a Nuget config file, potentially compromising package management access.
nytimes-access-token	Detected a Nytimes Access Token, risking unauthorized access to New York Times APIs and content services.
octopus-deploy-api-key	Discovered a potential Octopus Deploy API key, risking application deployments and operational security.
okta-access-token	Identified an Okta Access Token, which may compromise identity management services and user authentication data.
openai-api-key	Found an OpenAI API Key, posing a risk of unauthorized access to AI services and data manipulation.
openshift-user-token	Found an OpenShift user token, potentially compromising an OpenShift/Kubernetes cluster.
perplexity-api-key	Detected a Perplexity API key, which could lead to unauthorized access to Perplexity AI services and data exposure.
pkcs12-file	Found a PKCS #12 file, which commonly contain bundled private keys.
plaid-api-token	Discovered a Plaid API Token, potentially compromising financial data aggregation and banking services.
plaid-client-id	Uncovered a Plaid Client ID, which could lead to unauthorized financial service integrations and data breaches.
plaid-secret-key	Detected a Plaid Secret key, risking unauthorized access to financial accounts and sensitive transaction data.
planetscale-api-token	Identified a PlanetScale API token, potentially compromising database management and operations.
planetscale-oauth-token	Found a PlanetScale OAuth token, posing a risk to database access control and sensitive data integrity.
planetscale-password	Discovered a PlanetScale password, which could lead to unauthorized database operations and data breaches.
postman-api-token	Uncovered a Postman API token, potentially compromising API testing and development workflows.
prefect-api-token	Detected a Prefect API token, risking unauthorized access to workflow management and automation services.
private-key	Identified a Private Key, which may compromise cryptographic security and sensitive data encryption.
privateai-api-token	Identified a PrivateAI Token, posing a risk of unauthorized access to AI services and data manipulation.
pulumi-api-token	Found a Pulumi API token, posing a risk to infrastructure as code services and cloud resource management.
pypi-upload-token	Discovered a PyPI upload token, potentially compromising Python package distribution and repository integrity.
rapidapi-access-token	Uncovered a RapidAPI Access Token, which could lead to unauthorized access to various APIs and data services.
readme-api-token	Detected a Readme API token, risking unauthorized documentation management and content exposure.
rubygems-api-token	Identified a Rubygem API token, potentially compromising Ruby library distribution and package management.
scalingo-api-token	Found a Scalingo API token, posing a risk to cloud platform services and application deployment security.
sendbird-access-id	Discovered a Sendbird Access ID, which could compromise chat and messaging platform integrations.
sendbird-access-token	Uncovered a Sendbird Access Token, potentially risking unauthorized access to communication services and user data.
sendgrid-api-token	Detected a SendGrid API token, posing a risk of unauthorized email service operations and data exposure.
sendinblue-api-token	Identified a Sendinblue API token, which may compromise email marketing services and subscriber data privacy.
sentry-access-token	Found a Sentry.io Access Token (old format), risking unauthorized access to error tracking services and sensitive application data.
sentry-org-token	Found a Sentry.io Organization Token, risking unauthorized access to error tracking services and sensitive application data.
sentry-user-token	Found a Sentry.io User Token, risking unauthorized access to error tracking services and sensitive application data.
settlemint-application-access-token	Found a Settlemint Application Access Token.
settlemint-personal-access-token	Found a Settlemint Personal Access Token.
settlemint-service-access-token	Found a Settlemint Service Access Token.
shippo-api-token	Discovered a Shippo API token, potentially compromising shipping services and customer order data.
shopify-access-token	Uncovered a Shopify access token, which could lead to unauthorized e-commerce platform access and data breaches.
shopify-custom-access-token	Detected a Shopify custom access token, potentially compromising custom app integrations and e-commerce data security.
shopify-private-app-access-token	Identified a Shopify private app access token, risking unauthorized access to private app data and store operations.
shopify-shared-secret	Found a Shopify shared secret, posing a risk to application authentication and e-commerce platform security.
sidekiq-secret	Discovered a Sidekiq Secret, which could lead to compromised background job processing and application data breaches.
sidekiq-sensitive-url	Uncovered a Sidekiq Sensitive URL, potentially exposing internal job queues and sensitive operation details.
slack-app-token	Detected a Slack App-level token, risking unauthorized access to Slack applications and workspace data.
slack-bot-token	Identified a Slack Bot token, which may compromise bot integrations and communication channel security.
slack-config-access-token	Found a Slack Configuration access token, posing a risk to workspace configuration and sensitive data access.
slack-config-refresh-token	Discovered a Slack Configuration refresh token, potentially allowing prolonged unauthorized access to configuration settings.
slack-legacy-bot-token	Uncovered a Slack Legacy bot token, which could lead to compromised legacy bot operations and data exposure.
slack-legacy-token	Detected a Slack Legacy token, risking unauthorized access to older Slack integrations and user data.
slack-legacy-workspace-token	Identified a Slack Legacy Workspace token, potentially compromising access to workspace data and legacy features.
slack-user-token	Found a Slack User token, posing a risk of unauthorized user impersonation and data access within Slack workspaces.
slack-webhook-url	Discovered a Slack Webhook, which could lead to unauthorized message posting and data leakage in Slack channels.
snyk-api-token	Uncovered a Snyk API token, potentially compromising software vulnerability scanning and code security.
sonar-api-token	Uncovered a Sonar API token, potentially compromising software vulnerability scanning and code security.
sourcegraph-access-token	Sourcegraph is a code search and navigation engine.
square-access-token	Detected a Square Access Token, risking unauthorized payment processing and financial transaction exposure.
squarespace-access-token	Identified a Squarespace Access Token, which may compromise website management and content control on Squarespace.
stripe-access-token	Found a Stripe Access Token, posing a risk to payment processing services and sensitive financial data.
sumologic-access-id	Discovered a SumoLogic Access ID, potentially compromising log management services and data analytics integrity.
sumologic-access-token	Uncovered a SumoLogic Access Token, which could lead to unauthorized access to log data and analytics insights.
telegram-bot-api-token	Detected a Telegram Bot API Token, risking unauthorized bot operations and message interception on Telegram.
travisci-access-token	Identified a Travis CI Access Token, potentially compromising continuous integration services and codebase security.
twilio-api-key	Found a Twilio API Key, posing a risk to communication services and sensitive customer interaction data.
twitch-api-token	Discovered a Twitch API token, which could compromise streaming services and account integrations.
twitter-access-secret	Uncovered a Twitter Access Secret, potentially risking unauthorized Twitter integrations and data breaches.
twitter-access-token	Detected a Twitter Access Token, posing a risk of unauthorized account operations and social media data exposure.
twitter-api-key	Identified a Twitter API Key, which may compromise Twitter application integrations and user data security.
twitter-api-secret	Found a Twitter API Secret, risking the security of Twitter app integrations and sensitive data access.
twitter-bearer-token	Discovered a Twitter Bearer Token, potentially compromising API access and data retrieval from Twitter.
typeform-api-token	Uncovered a Typeform API token, which could lead to unauthorized survey management and data collection.
vault-batch-token	Detected a Vault Batch Token, risking unauthorized access to secret management services and sensitive data.
vault-service-token	Identified a Vault Service Token, potentially compromising infrastructure security and access to sensitive credentials.
yandex-access-token	Found a Yandex Access Token, posing a risk to Yandex service integrations and user data privacy.
yandex-api-key	Discovered a Yandex API Key, which could lead to unauthorized access to Yandex services and data manipulation.
yandex-aws-access-token	Uncovered a Yandex AWS Access Token, potentially compromising cloud resource access and data security on Yandex Cloud.
zendesk-secret-key	Detected a Zendesk Secret Key, risking unauthorized access to customer support services and sensitive ticketing data.