Code Leak Detector

Code Leak Detector v2.0.5 is a Windows-based desktop application designed to identify and manage accidentally exposed secrets within source code projects before they become security risks. It provides a comprehensive, local-first approach to code scanning, ensuring that all analysis is performed entirely on the user’s machine without transmitting source code, file metadata, or detected secrets externally.

The application features a robust detection engine powered by over 200 predefined patterns covering a wide range of technologies, including cloud platforms, authentication systems, databases, payment services, messaging tools, CI/CD pipelines, and AI integrations. In addition to pattern matching, it incorporates entropy-based analysis to detect high-risk strings associated with sensitive variables, enabling the identification of custom or non-standard secrets that traditional rules may miss.

Code Leak Detector supports real-time file monitoring, allowing it to scan files instantly upon creation or modification. This ensures that potential leaks are detected early in the development process. Optional desktop notifications provide immediate feedback, helping developers respond quickly to newly introduced risks.

For extended coverage, the application integrates with established open-source security tools such as Gitleaks, TruffleHog, detect-secrets, Semgrep, Trivy, and Secretlint. Results from these tools are consolidated into a unified interface, simplifying analysis and reducing fragmentation across multiple scanning solutions.

A built-in security dashboard provides a structured overview of scan results, including total detected leaks, a weighted risk score, an overall security grade, severity distribution, category breakdown, and identification of reused secrets. This enables users to quickly assess the security posture of their projects.

The tool maintains a local scan history, allowing users to track changes and trends over time. A learning-based false positive management system enables users to mark and exclude non-relevant findings, improving accuracy in future scans without relying on external services.

Security is reinforced through masked display of sensitive values within the interface and secure memory handling, where detected secrets are overwritten in memory after use. The application is fully functional offline, with optional internet access only used for user-initiated external searches.

Code Leak Detector requires Windows 10 or 11 (64-bit), minimal system resources, and no dependencies for core functionality. It is distributed as proprietary software under a one-time purchase model, granting access to all updates within the 2.x version range.

Overall, Code Leak Detector is positioned as a practical and privacy-focused solution for developers and teams seeking to strengthen their code security practices through efficient, local, and real-time secret detection.