Betterleaks 1.9.0

Scan the world (for secrets)

  • By Zachary Rice
  • Open Source
  • Updated Sep 29, 2026
Download for Windows

About Betterleaks

Betterleaks is a tool for finding secrets like passwords and API keys.

What's new in 1.9.0

What's New
Betterleaks v1.9.0 expands secret detection coverage and improves performance.

  • Added 46 detection rules, including Miro, VoyageAI, and Bitbucket Data Center tokens.
  • Reduced memory retention and logging overhead during scans.
  • Refined detection patterns and filters to reduce false positives.
  • Fixed duplicate PKCS#12 file findings and removed internal attributes from reports.
  • Empty JSON reports now return [] instead of null.

Changelog

  • 2bc07526bd83d8402bed0f7991c4d3e60f345af3 Add VoyageAI API key rule (#324)
  • 3d798ac55d89f14a60c8df65d4d2bda6fccb1ea1 Clone box context so fragment.Raw can be released (#313)
  • b1599d6c50946e8b2765e676318a92e5ecce62eb Merge branch 'main' of github.com:betterleaks/betterleaks
  • ee133f66764c6a3285ff781a53bde72bc0a0b93a Revert "forgot a test/comment"
  • e9ddabf2c87a7715b07e7179d617a93c19f031f1 Revert "only retain findings when needed (#323)"
  • 10234528e348f4a64f0a693df50b01589cb53933 Revert "remove semgroup crossing detect/source boundary (#325)"
  • f3188f0ad29a7c11c8bac279e46559f9e224c873 Revert "rm more deprecated fields (#326)"
  • 0f4004beaa13a37b7a3c5f120ac3c6ce4bdfe29c Rules/miro (#291)
  • 530e3304d96b604bbabb7dde19bb38bda8db5cae add Bitbucket Data Center token rule (#346)
  • 1c5b7d82eb35007df51d37a397a8360a9ec2daae couple new rules (#311)
  • 5b53d1b30685e1a9cab17062f5014f63783f365b filter out obvious encryption (#310)
  • 2e108eac8b3f552147fcd455cbe34e0cacff589e fix:make sumoLogic accessID prefix case-sensitive (#322)
  • 5ac4b0b5333a6b39b6c1762070ac235a68d57d9c forgot a test/comment
  • 0e4ce8453904512673b6a23dad5e8d3433567b53 more rules (#312)
  • 95237cf8eb4d8e9f67409595b245e674832992cf only construct a logger after regex hit (#338)
  • 574f3a533d9f9af87a1cfac4d9447a95e9ac3d4c only retain findings when needed (#323)
  • abeb307ccee7af8e06ca7923db9a2fa51c72ea69 optimize some rules (#328)
  • 81aff7a638638aae3a659845d089043e1d8fe9ac prep v1 release
  • 1a591583c114e27afffeb7cbc04ba6a6048175bd remove semgroup crossing detect/source boundary (#325)
  • 2a387a5bad4290a84b9a1eb679bffe70611218cc report empty JSON arrays for nil findings (#349)
  • 820ea5a5ed8915ac1dd0b68a590bed1f561ce351 rm more deprecated fields (#326)
  • 2ef00ea7bbbb40cccb7ea72028e7f19cd1086e6d stop reporting fs first fragment (#336)
  • 2ba7943682b82a3659a89dae8fc680de1ef6b781 stop running pkcs12-file on every fragment (#332)

Full release notes »

Technical details

PublisherZachary Rice
Version1.9.0
Release date2026-09-29
LicenseMIT
Installer typezip
Architecturex64, arm64
Package IDBetterleaks.Betterleaks

Install Betterleaks from the command line

Install with Windows Package Manager
winget install --id=Betterleaks.Betterleaks -e
Update to the latest version
winget upgrade --id=Betterleaks.Betterleaks -e
Uninstall
winget uninstall --id=Betterleaks.Betterleaks -e

cicdcredentialsdeveloper-toolsdevopsdevsecopsgitgithubgitleaksgogolangllm-toolsnhisecretsecrets

Betterleaks version history

  • 1.8.1
  • 1.7.2
  • 1.7.1
  • 1.7.0
  • 1.6.1
  • 1.5.0
  • 1.4.1
  • 1.3.1

Frequently asked questions

Is Betterleaks free?

Yes. Betterleaks is free and open-source software released under the MIT license.

What is the latest version of Betterleaks?

The latest version is 1.9.0, released on Sep 29, 2026.

Is it safe to download Betterleaks?

The download button links to the official installer published on github.com, the same file Windows Package Manager installs. You can verify the downloaded file by comparing its SHA-256 checksum with b765daec9fda475b031b5a5159798cbe4294a3f2a50683cbc0471226e376d3da.

Which Windows versions does Betterleaks support?

Betterleaks runs on Windows and is available for 64-bit (x64), ARM64 systems.

How do I uninstall Betterleaks?

Open Settings › Apps › Installed apps, find Betterleaks and select Uninstall. From the command line, run winget uninstall --id=Betterleaks.Betterleaks -e.