Stratus Security Releases Sift, an Open-Source Tool for Scanning Enterprise Platforms for Secrets

Summary

Stratus Security released Sift, a free open-source scanner for credentials across local storage and enterprise services. It supports checkpoints, rate limits and optional local Ollama filtering; vendor benchmarks on synthetic data show lower scan times and memory use vs

Key points

Sift scans local disks and services including Active Directory, SharePoint, OneDrive, Teams, Slack, Jira and Confluence for passwords, API keys and other sensitive data.
Stratus Security says it built the free, open-source command-line tool for its penetration testing work.
In Stratus’s benchmarks on synthetic repositories, Sift scanned faster and used less memory than Snaffler; the article notes the tests were vendor-run and results should be treated as directional.
Sift supports scan checkpoints, thread-count and read-rate controls, and optional filtering through a local Ollama-powered language model.
Detection rules are editable JSON files. Release binaries are not code-signed, and users are advised to check downloads against published SHA256 sums.

Article Details

Event Type: Release of Sift, a free open-source secrets-scanning tool
Impact: Sift scans local and enterprise platforms for passwords, API keys, and other sensitive data. Stratus Security reported finding thousands of credentials in Jira ticket comments during a penetration test. The article also describes checkpointed scans, rate limiting, and optional local language-model filtering; its performance comparisons are based on Stratus Security’s synthetic-data benchmarks.

People

Colin WatsonCTO at Stratus Security; described Sift’s credential findings and the company’s maintenance plans for the tool.

Products

Confluencedisks and enterprise platforms like Active Directory, SharePoint, OneDrive, Teams, Slack, Jira, and Confluence for passwords, API keys, and other sensitive data.Jirathat scans local disks and enterprise platforms like Active Directory, SharePoint, OneDrive, Teams, Slack, Jira, and Confluence for passwords, API keys, and other sensitive data.Microsoft Active Directorycommand line tool from Stratus Security that scans local disks and enterprise platforms like Active Directory, SharePoint, OneDrive, Teams, Slack, Jira, and Confluence for passwords, API keys, and other Microsoft OneDrivefrom Stratus Security that scans local disks and enterprise platforms like Active Directory, SharePoint, OneDrive, Teams, Slack, Jira, and Confluence for passwords, API keys, and other sensitive data.Microsoft SharePointline tool from Stratus Security that scans local disks and enterprise platforms like Active Directory, SharePoint, OneDrive, Teams, Slack, Jira, and Confluence for passwords, API keys, and other sensitive data.OllamaIt is designed to be faster and lighter than Snaffler, supports checkpointed scans, and can use a local Ollama-powered language model to reduce false positives without sending scan data off the machine.Slackthat scans local disks and enterprise platforms like Active Directory, SharePoint, OneDrive, Teams, Slack, Jira, and Confluence for passwords, API keys, and other sensitive data.TeamsSecurity that scans local disks and enterprise platforms like Active Directory, SharePoint, OneDrive, Teams, Slack, Jira, and Confluence for passwords, API keys, and other sensitive data.

Tools

SiftSift is a free, open-source command line tool from Stratus Security that scans local disks and enterprise platforms like Active Directory, SharePoint, OneDrive, Teams, Slack, Jira, and Confluence for passwords, API SnafflerIt is designed to be faster and lighter than Snaffler, supports checkpointed scans, and can use a local Ollama-powered language model to reduce false positives without sending scan data off the machine.