head to head · open source
gitleaks vs YaraHunter
gitleaks has 29,364 GitHub stars, 2,236 forks, 481 open issues and last shipped 9 days ago. YaraHunter has 1,319 stars, 155 forks, 6 open issues and last shipped 7 months ago. gitleaks leads on adoption by 2,126% (29,364 vs 1,319 stars). gitleaks is written in Go under MIT; YaraHunter is written in Go under Apache-2.0. gitleaks has attracted 8% as many forks as stars, YaraHunter 12%. gitleaks was the more recently maintained of the two, and both are self-hostable with no licence fee. The two share 3 topic tags (ci-cd, devsecops, hacktoberfest), so they are genuine substitutes rather than adjacent tools.
Two open source projects, one decision. Both are free and self-hostable — the differences are community size, license terms, language stack and release pace.
← all 8884 open source comparisons
Side by side
| gitleaks | YaraHunter | |
|---|---|---|
| GitHub stars | ★ 29K | ★ 1.3K |
| License | MIT | Apache-2.0 |
| Written in | Go | Go |
| Last push | 2026-09-09 | 2026-03-07 |
| Forks | ⑂ 2.2K | ⑂ 155 |
| Self-hosting | Yes | Yes |
| Data ownership | Your server | Your server |
pick gitleaks if
- You weight community size — 29K stars and counting
- You want the MIT license terms
- Your stack matches Go
- You value the larger contributor base for long-term maintenance
pick YaraHunter if
- You want the YaraHunter feature set and don't need the biggest community
- You prefer the Apache-2.0 license terms
- Your stack matches Go
- You evaluated both and YaraHunter fits your workflow better
About gitleaks
Gitleaks is an MIT licensed, Go based command line tool that detects hardcoded secrets such as passwords, API keys, and tokens in git repositories, files, and standard input, and it serves developers and security teams that need to keep credentials out of source control.
read the full gitleaks overview →
About YaraHunter
YaraHunter is an Apache 2.0 licensed, Go based malware scanner from Deepfence that examines container images, running Docker containers, and filesystems for indicators of compromise using a YARA ruleset, and it is built for DevSecOps and security engineers who need the same malware check to run inside a CI/CD pipeline, before deployment, and against live containers.
read the full YaraHunter overview →
More in Infrastructure & Operations
Related comparisons
More Orchestration & Scheduling projects
Compare either of these against the rest of the Orchestration & Scheduling field.
Frequently asked questions
Is gitleaks or YaraHunter more popular?
gitleaks has 29,364 GitHub stars and YaraHunter has 1,319. gitleaks has the larger community by that measure.
Are gitleaks and YaraHunter free?
Both are open source. gitleaks is licensed under MIT and YaraHunter under Apache-2.0. Neither carries a licence fee.
What is the difference between gitleaks and YaraHunter?
gitleaks is written in Go and YaraHunter in Go. The practical differences are community size, licence terms, language stack and release cadence — all compared in the table above.
Which should I choose, gitleaks or YaraHunter?
Choose gitleaks if you want the larger community (29,364 stars) or its MIT licence terms. Choose YaraHunter if its feature set, stack or Apache-2.0 licence fits better. Both are self-hostable.