MORF is an advanced toolkit designed for mobile application security analysis, capable of detecting sensitive information and vulnerabilities in Android and iOS apps. It offers features like secret detection, component analysis, and permission assessment, along with a user-friendly interface and CLI for automation. MORF has gained recognition in the security community, being featured in multiple security conferences, and is available for installation via Docker or a run script.

Kingfisher is an open-source secret detection and validation tool developed by MongoDB that scans code repositories for hard-coded credentials and API keys while validating their activity in real-time. Designed for on-premises use, it enhances security by reducing false positives and ensuring that sensitive data remains within the user's infrastructure. Kingfisher integrates seamlessly with CI/CD pipelines and supports various programming languages, making it a versatile solution for developers and security teams.