OVERALL RATINGS
INSTALLS
222
SUPPORT
- Partner Supported
Key highlights of the appDetect sensitive secrets such as API keys and passwords with this powerful Bitbucket security scanner. Run audits & protect PII
Run Security Scans on Already-Committed Code
Run scans of already-committed content. Export results as downloadable reports, or drill down from the global status all the way to an individual branch via our interactive Security Scan Report.
Detect & Block Commits That Contain Sensitive Info
Accidentally committed secrets such as credentials, API keys, SSH keys, and passwords are a common vector for privilege escalation by attackers. Protect your organization by scanning and rejecting such commits.
Top Firms Use This Bitbucket Vulnerability Scanner
Private keys hiding in source code have damaged big firms. That's why top companies are proactively scanning their Bitbucket repositories for security vulnerabilities. Join these companies in taking a proactive approach.
Supporting media
More details
Bitbucket secret scanning to detect & block commits containing sensitive information such as passwords, API keys, and other secrets. Protect your company from errors that can be exploited by attackers!
✨ Features ✨
- Pre-receive hook to reject new commits with secrets
- Enabled per repository, per project, or globally
- Warn-only mode to notify about security issues without blocking commits
- Git repository scanning to analyze existing code
- Trigger scans for a repo, project, or whole Bitbucket instance
- Downloadable reports of scan findings
- Flexible workflows for false positives
- REST API for scripting & automation
- Built-in rules for commonly leaked secrets, such as SSH keys & API keys
- Define custom secret scanning rules, globally or per-repo
See docs for more!
🔒 Your data stays secure and local. We don't phone home.
😀 Other secret scanners you’ll like:
🗓 Want to know more? Book a demo
🤝 Solution Partner? Contact us
Bitbucket 8? Use v4.18.3
Resources
Download
Get the .jar file downloaded to your system
App documentation
Comprehensive set of documentation from the partner on how this app works
EULA
Get the End User License Agreement for this app
Privacy and Security
Privacy policy
Atlassian's privacy policy is not applicable to the use of this app. Please refer to the privacy policy provided by this app's partner.
Partner privacy policySecurity program
This app is part of the Marketplace Bug Bounty program.
About Bug Bounty programTrust center
Access the partner's trust center to review their security, compliance and privacy information for this app.
Check out partner trust centerVersion information
Version 5.2.4•for Bitbucket Data Center 9.0.0 - 9.6.3
- Release date
- Jun 27th 2025
- Summary
- Improved database space usage, minor UI bug fixes.
- Details
Note: Plugin data migrations contained in updates might cause Security for Bitbucket to be unresponsive for up to 20 minutes immediately after upgrading the plugin.
- Security for Bitbucket now better controls table size for scan results, resulting in lower database space usage. See our docs for more info.
- Minor UI bug fixes.
For versions of Bitbucket prior to 9.0.0, please choose Security for Bitbucket v4.18.4.
- Payment model
- Paid via Atlassian