---
title: "Too Many Secrets"
date: "2026-05-26T10:55:24+00:00"
url: "https://checkmarx.com/product/2ms/"
description: "Too Many Secrets (2MS) is an open-source tool by Checkmarx that automatically detects credentials exposed in code repositories and collaboration platforms."
---

# Too Many Secrets

 By Checkmarx

# Too Many Secrets (2MS)

2MS is an open-source tool that automatically detects credentials and other sensitive details exposed in code repositories and collaboration platforms.

 [Get 2MS at GitHub](#) [Get 2MS at Docker](#)

## Exposed secrets are a major AppSec attack vector

Enterprises are unintentionally exposing thousands of secret credentials every day, leading to cyberattacks, financial loss, and reputational damage. 2MS finds exposed secrets so that you can better protect your organization from attack.

 327

avg. days to identify leaked credentials

 1.7M

leaks in public GitHub repos, annually

 170+

types of secrets detected by 2MS

 20K+

2MS downloads to date

## Prevent Exposed Secrets with 2MS

Use this free tool to identify 170+ types of secrets stored as unencrypted text in code repositories, communication platforms, and content management platforms.

 [Get 2MS at GitHub](#) [Get 2MS at Docker](#)

 ![Gartner Logo - CTA Awards](https://checkmarx.com/wp-content/uploads/2026/06/Gartner-Logo-CTA-Awards.svg) A Gartner® Magic Quadrant Leader™

 ![Forrester](https://checkmarx.com/wp-content/uploads/2026/06/Forrester.svg) A Forrester Wave Leader™

 ![SOC2 Logo](https://checkmarx.com/wp-content/uploads/2026/06/SOC2-Logo.svg) SOC 2 Type II Certified

## Keep your Secrets Secret with 2MS

Minimize risk by quickly identifying and eliminating sensitive credentials that may have been unintentionally exposed.

### Powerful Secrets Detection

2MS accurately identifies 170+ different types of secrets (login credentials, access tokens, encryption keys, API keys, SSH keys, webhook URLs, etc.) in code repositories (Git repos and local directories), collaboration tools (Slack and Discord), and CMS Platforms (Confluence and Paligo).

 ![2ms-1](https://checkmarx.com/wp-content/uploads/2026/05/2ms-1.webp)

### Automatic Secret Validation

To help prioritize remediation efforts, 2MS automatically attempts to determine which discovered secrets are still valid and operative.

 ![2ms-2](https://checkmarx.com/wp-content/uploads/2026/05/2ms-2.webp)

### Rule Customization

Detection rules can be customized or added using RegEx expressions, and existing rules can be flagged to be ignored.

 ![2ms-3](https://checkmarx.com/wp-content/uploads/2026/05/2ms-3.webp)

### CI/CD Integrations

Secret detection can be automated as part of workflows via integration with GitHub Actions and Azure Pipelines.

 ![2ms-4](https://checkmarx.com/wp-content/uploads/2026/05/2ms-4.webp)

What Our Customers Say

## Stories from enterprise security leaders

 ![](https://checkmarx.com/wp-content/uploads/2026/05/BestBuyLogoReversedRGB.svg)

> “We’ve seen an 80% noise reduction — our engineers now focus on the high-quality risks that matter.”

 [ Explore Best Buy Case Study    ](https://checkmarx.com/resources/best-buy/)

 ![](https://checkmarx.com/wp-content/uploads/2025/09/Checkmarx-Best-Buy-Testimonial-V2.webp)

 ## Keep your Secrets Secret with 2MS

Automate, secure, and simplify your software inventory management for government-grade security standards.

 [Get a Demo](#)

 ![Gartner Logo - CTA Awards](https://checkmarx.com/wp-content/uploads/2026/06/Gartner-Logo-CTA-Awards.svg) A Gartner® Magic Quadrant Leader™

 ![Forrester](https://checkmarx.com/wp-content/uploads/2026/06/Forrester.svg) A Forrester Wave Leader™

 ![SOC2 Logo](https://checkmarx.com/wp-content/uploads/2026/06/SOC2-Logo.svg) SOC 2 Type II Certified