Side by side

Endor Labs vs Gitleaks

Both stand on secrets scanning software. Which one you can start free with, which one lets you read the code, and what each costs once you pay.

Endor Labs

Free plan APIExtensionLinux+4

Endor Labs brings source, dependency and agent-security capabilities into one platform, with several deployment options. The free tier is limited, and teams considering paid plans need to contact sales for pricing.

Visit Endor Labs

Gitleaks

Free plan LinuxMacSelf-hosted+1

Gitleaks offers configurable secret scanning across common repository and development workflows, with multiple report formats and installation options. Its maintenance scope is limited: the project describes it as feature complete and supports only the latest version.

Visit Gitleaks

The facts

	Endor Labs	Gitleaks
Free plan	Yes	Yes
Open source	Not published	Not published
Runs on	API, Extension, Linux, Mac, Self-hosted, Web, Windows	Linux, Mac, Self-hosted, Windows
Lowest paid plan	Free or on request	Free or on request
Plans published	3	1
Maker	Not published	Not published
Website	endorlabs.com	github.com
On secrets scanning software	#5 of 24	#9 of 24

Endor Labs: what it does well

Free Developer tier offers local scans.
Can inventory agents, models, MCP servers and skills.
Scanning supports cloud, CI/CD runners and on-premises deployment.
Generates SBOM and VEX.
Paid plans include policies.

What to know first

Free tier has no UI or scan history.
Free tier does not include policies.
Paid plan prices require contacting sales.
No free trial is listed.

Gitleaks: what it does well

Scans repositories, files, directories, and stdin.
Supports configurable detection rules and allowlists.
Reports can be output in five formats.
Supports pre-commit, pull-request, and CI/CD scanning.
Free under the MIT License.

What to know first

Future releases are limited to security patches.
Only the latest version is supported.

Alternatives to Endor Labs Alternatives to Gitleaks The whole list