Background Beta

Intelligent Secrets Detection

Sign up for an exclusive preview!

  • Help filter out non-secret lookalikes
  • Identify confirmed secrets scoped for non-production or test usage
  • Builds on JFrog secrets detection across source code and configuration files

*Access requires a JFrog SaaS subscription with JFrog Advanced Security and acceptance of the JFrog Preview Terms of Service and AI Addendum. Submitting a request does not guarantee access.

Acceptance and access are at JFrog’s discretion.

Intelligent Secrets Detection at a Glance

What is Intelligent Secrets Detection?

Intelligent Secrets Detection, currently in Preview for JFrog SaaS, uses a fine-tuned classification model to provide an additional layer of context validation for detected secrets.

Why does it matter?

Pattern matching alone can’t always judge ambiguous, context-dependent cases, such as weak or common passwords. Intelligent Secrets Detection provides an additional layer that helps filter out non-secret lookalikes and secrets that are for test purposes in your results.

How does it work?

For findings that deterministic rules-based secrets detection can’t confidently resolve, Intelligent Secrets Detection analyzes the surrounding code for additional context, acting as a second-pass layer designed to classify ambiguous findings more accurately.

Serving over 80% of the Fortune 100

Important Notice: This page is provided for general informational purposes only. It reflects information available as of the publish date shown below, and JFrog may not update it. It is provided “as is,” without warranty of any kind, is not legal, compliance, or security advice, and does not guarantee any security, product, financial, or legal outcome. To the extent permitted by law, JFrog is not liable for any decision made or action taken in reliance on it. Third-party statistics and studies are reported as published by their sources and have not been independently verified by JFrog. Results depend on your environment, situation, and configuration. Product capabilities vary by edition and deployment model. Nothing in this page creates any commitment or modifies any agreement. Your use of JFrog products is governed by your agreement with JFrog. JFrog is a registered trademark of JFrog Ltd. in the United States. All other trademarks referenced in this document are the property of their respective owners, and their use does not imply any affiliation with or endorsement by them.