- Home
- Secrets Scanning Software
- Arnica Secrets Security
Arnica Secrets Security
What it is
Arnica Secrets Security finds hardcoded secrets in code and validates them, then can automatically mitigate newly pushed secrets that are confirmed by rewriting commits and removing the secrets from Git history. It assesses severity using context such as whether a credential belongs to a highly privileged or development account. Arnica scans codebases daily and revalidates secrets when code changes or scheduled scans run. It supports GitHub, GitLab, Azure DevOps, and Bitbucket, with alerts through Slack or Microsoft Teams and ticketing through Jira or Azure DevOps Boards. Teams can set regex-based detectors, ignored paths, and scanning and resolution policies. Arnica says it does not persist source-code snippets containing detected secrets; it describes tenant-separated customer data encrypted at rest and TLS 1.2 or 1.3 in transit, with cloud infrastructure on AWS. Free ingestion runs every seven days; premium plans scan in real time. Free is free, Business is $300 a year, and Enterprise is $600 a year, billed per identity per year. A 14-day trial is listed.
For and against
For
- Daily scans and revalidation on code changes
- Can rewrite commits to remove validated secrets
- Custom regex detectors and scanning policies
- Integrates with four listed VCS platforms
Against
- Free ingestion runs every seven days
- Business costs $300 a year
- Enterprise costs $600 a year
The verdict
Arnica combines secret detection with contextual validation and remediation options. The free plan has weekly ingestion, while premium plans provide real-time scanning.
Who it suits
It suits teams that want to identify and respond to validated secrets across supported code repositories. Teams can choose a free tier or paid plans with real-time scanning and mitigation.
Plans and prices
Free
Weekly automated reports · SAST, SCA, IaC, licensing, and reputation scans · Secrets scanning · SSO
Read 5 Oct 2026 · arnica.io
Business
30 AI credits per identity · Real-time scanning · Slack and Microsoft Teams ChatOps · Zero new secret policy enforcement
Read 5 Oct 2026 · arnica.io
Enterprise
100 AI credits per identity · Custom code risk and secret rules · Arnica API · On-premise instance support
Read 5 Oct 2026 · arnica.io
On the record
- Compliance
- Arnica states that it is SOC 2 Type 2 compliant and describes annual third-party examination of its controls.arnica.io · read 5 Oct 2026
- Customization
- Teams can configure custom regex-based secret detectors, ignored paths, and policies for scanning and resolution workflows.arnica.io · read 5 Oct 2026
- Data handling
- Arnica says it does not persist source-code snippets containing detected hardcoded secrets, and encrypts collected customer data at rest with tenant separation.docs.arnica.io · read 5 Oct 2026
- Deployment
- The Enterprise plan includes support for an on-premise instance, and Arnica's pricing comparison marks on-prem deployment as an add-on.arnica.io · read 5 Oct 2026
- Encryption and hosting
- Arnica says its cloud infrastructure is hosted on AWS and customer data is encrypted in transit with TLS 1.2 or 1.3 and at rest with AES 256.arnica.io · read 5 Oct 2026
- Free-tier limit
- Arnica says data ingestion runs every seven days on the free plan and runs in real time on premium plans.arnica.io · read 5 Oct 2026
- Identity billing
- Arnica defines billable identities as users and other contributing entities with code contributions or pull-request activity in the last 90 days, with duplicates removed across organizations.arnica.io · read 5 Oct 2026
- Integrations
- The secrets product page lists GitHub, GitLab, Azure DevOps, and Bitbucket integrations, with alerts through Slack and Microsoft Teams and tickets through Jira or Azure DevOps Boards.arnica.io · read 5 Oct 2026
- Product
- Arnica detects and validates hardcoded secrets and can automatically mitigate newly pushed validated secrets by rewriting commits and removing them from Git history.arnica.io · read 5 Oct 2026
- Scheduled scans
- Arnica scans the codebase daily and revalidates secrets on code changes and scheduled scans.arnica.io · read 5 Oct 2026
- Support
- The Free plan includes customer success, and Enterprise includes support for an on-premise instance.arnica.io · read 5 Oct 2026
- Validation
- Arnica assigns secret severity using validation context, including whether credentials belong to a highly privileged or development account.arnica.io · read 5 Oct 2026
