Open-source secrets scanning tool Sift hunts credentials in Microsoft 365, Slack, and Jira

▤ Summary

Stratus Security released Sift, a free open-source command-line tool that scans for passwords, API keys, and other sensitive data across common enterprise systems. The tool covers local disks, Windows file shares, Active Directory, SharePoint, OneDrive, Microsoft Teams, Slack, Jira, and Confluence. Stratus says Sift runs faster and uses less memory than Snaffler in its own benchmarks, and it can checkpoint scans and throttle throughput for production environments. The tool also supports optional local LLM-based false positive filtering through Ollama and ships with JSON-based detection rules. Stratus hosts the project on GitHub and asks users to verify downloads with published SHA256 sums because binaries are not yet code signed.

▦ Linked Companies