Secret Scanning platforms detect credentials, API keys, tokens, certificates, and other secrets that have been committed to source repositories, CI/CD logs, collaboration tools, or other non-secure storage locations — in real time on new commits, historically across full repository history, and across adjacent surfaces (Jira, Slack, Confluence, container images, artifact registries). Core capabilities include high-precision detection across hundreds of secret patterns, validation (does the credential still work?), automated revocation workflows with upstream providers, historical repository scanning for long-dormant exposures, and integration with secret managers so that detected leaks trigger rotation at the source. Leading vendors include GitGuardian, TruffleHog (Truffle Security), GitHub Secret Scanning, Nightfall AI, Spectral (Check Point), and Gitleaks (OSS).