Sift is a free, open-source command line tool from Stratus Security that scans local disks and enterprise platforms like Active Directory, SharePoint, OneDrive, Teams, Slack, Jira, and Confluence for passwords, API keys, and other sensitive data. It is designed to be faster and lighter than Snaffler, supports checkpointed scans, and can use a local Ollama-powered language model to reduce false positives without sending scan data off the machine. #Sift #StratusSecurity #Snaffler #Ollama #Jira #Confluence #SharePoint #OneDrive #Teams #Slack #ActiveDirectory
Keypoints
- Sift searches for sensitive data across many enterprise storage and collaboration platforms.
- Stratus Security built the tool for its own penetration testing work and released it for free.
- Benchmarks show Sift is faster and uses less memory than Snaffler on synthetic test data.
- The tool supports scan checkpoints, rate limiting, and optional local LLM filtering through Ollama.
- Detection rules are editable JSON files, and users should verify downloads with published SHA256 sums.
Read More: https://www.helpnetsecurity.com/2026/09/02/sift-open-source-secret-scanning/