Open-source Klarion uses AI to cut secret-scanner noise, finds 1.7x more real leaks
Miserable-Carpet-474 · reddit · 2026-10-04
Klarion is a free, open-source (MIT) secret scanner that combines 81 regex rules and a normalized Rényi entropy score with an AI model that reads surrounding code to filter false positives.
- On 61k files across spring-boot, terraform, next.js and symfony, it raised only 11 alerts
- On the CredData benchmark (337 real repos), it found 1.7x more real secrets than gitleaks
- Integrates as a Claude Code plugin hook (blocks writes before files exist), an MCP server for Cursor/Cline, a GitHub/GitLab CI action scanning only PR additions, git hooks via klarion protect, or local klarion scan .
Full benchmark and methodology are in benchmark/REPORT.md.
More from coding & agent
- RLM explained: MIT's recursive REPL approach lets LLMs handle contexts beyond the window — AnuranBuilds · 2026-10-04
- Open-source workflow extends static video shots with no degradation using masked bridge resampling — roychodraws · 2026-10-04
- After 18 years of hand-writing code, this dev quit for good — PRs up 50% with no more bugs — bibryam · 2026-10-04
- Perplexity's Decisions API beats Pokémon FireRed's Elite Four in one shot for $0.028 — AravSrinivas · 2026-10-04
- Hermes adds /blueprint: 16 built-in templates for recurring agent automations — Teknium · 2026-10-04
- Delvetown day four: AI agent town produces poems, games and SBF fanfiction — max_paperclips · 2026-10-04