Kingfisher: Open Source Secret Scanner with Live Validation by mongodb
Find, validate, and map the impact of leaked secrets across your stack. Revoke fast. 900+ rules.
About Kingfisher: Open Source Secret Scanner with Live Validation
From the project's README at github.com/mongodb/kingfisher. Lightly cleaned for readability; for the full source see the upstream repo.
Kingfisher is an open source secret scanner and live secret validation tool built in Rust.
It combines Intel's SIMD-accelerated regex engine (Hyperscan) with language-aware parsing to achieve high accuracy at massive scale, and ships with 950 built-in rules to detect, validate, and triage leaked API keys, tokens, and credentials before they ever reach production.
Kingfisher also ships a browser-based report viewer that visualizes and triages findings fr
Health score breakdown
6-dimension composite. See methodology for formula and weights.
Adoption signals
Real-world usage data, pulled from each registry. The bigger the numbers, the more battle-tested the project.
| Signal | Value | Source |
|---|---|---|
| GitHub stars | 1.1k | github.com/mongodb/kingfisher |
| GitHub forks | 97 | github.com/mongodb/kingfisher |
| CRATES downloads (last month) | 20 | kingfisher |
Release & maintenance
Is this project actively maintained, or about to die? Check the recency of last commit and last release.
| Project age | 1.0 years | since May 2025 |
| Last commit | 2 days ago | May 5, 2026 |
| Releases shipped | 88 | last: 6 days ago |
| Security policy | SECURITY.md | declared by maintainers |
Self-hosting cost across providers
Detected requirements: 4GB RAM, 40GB disk minimum. Cheapest plan per provider that meets the requirement.
| Provider | Plan | Specs | Monthly | |
|---|---|---|---|---|
| hetzner | CAX11 | 2c · 4GB · 40GB | $4.13 USD | Deploy → |
| vultr | VC2 | 1c · 1GB · 25GB | $5 USD | Deploy → |
| linode | Nanode 1GB | 1c · 1GB · 25GB | $5.12 USD | Deploy → |
| digitalocean | Basic Regular 1GB | 1c · 1GB · 25GB | $6 USD | Deploy → |
What people say on Hacker News
Ready to self-host Kingfisher: Open Source Secret Scanner with Live Validation?
Spin up a hetzner CAX11 (4GB RAM, 40GB disk) for $4.13/mo and follow the project's official install docs.
Data last refreshed May 7, 2026.
Similar open-source projects
Projects in our directory that replace the same SaaS or share topics with Kingfisher: Open Source Secret Scanner with Live Validation.