SCAN / MASK / REMEDIATE

OpenGuard

Find a secret without replicating it.

Local and background credential scanning, queue policies, fingerprint allowlist, remediation and CSV export.

IMPLEMENTED / PRE-PUBLISH

CAPABILITIES

AWS, GitHub, Yandex OAuth, private key, JWT and generic rules

Local pre-scan for text and attachments

Only masked values and SHA-256 fingerprints at rest

Manual/daily/weekly policies

Allowed/resolved workflow and export

DATA FLOW

Raw secrets exist only during scanning; audit never contains values or request bodies.

TRACKER→IFRAME→BACKEND→TRACKER / CHANNEL

FAILURES & BOUNDARIES

Unsupported attachments are skipped with a reason; false positives can be allowed by fingerprint.

Discuss an integration