Trufflehog
Find, verify, and analyze leaked credentials. TruffleHog is a security tool designed to scan your codebases for secrets and sensitive data such as passwords and API keys.
Trufflehog is built in Go, distributed under the GNU Affero General Public License v3.0, 25.7k GitHub stars from 100 contributors, latest release v3.94.3.
When to use Trufflehog
Trufflehog is listed here as a Security project. The directory calls out Scans codebases for secrets, Supports multiple version control systems, Offers a verification feature as capabilities associated with it.
Other recorded traits for Trufflehog include Can filter results based on regex, Automated scanning and reporting.
Besides Security, this page also files Trufflehog under Tools, CLI.
Trufflehog compared with
Records in this directory name GitGuardian, Gitleaks, Talisman as products people compare with Trufflehog. That list is editorial metadata, not a claim that Trufflehog replaces each of them.
What the Trufflehog stats reflect
GitHub currently shows 25.7k GitHub stars, about 100 contributors, 2.3k forks, 415 open issues, latest tracked release v3.94.3. Star and activity counts here are a snapshot used as a proxy for community adoption, not a quality score.
Stats refreshed
- Language
- Go
- Latest Release
- v3.94.3
- License
- GNU Affero General Public License v3.0
Our Newsletter
Get new Security tools right in your inbox
Get short emails with useful security projects, releases, and repos worth watching.
Key features of Trufflehog
- Scans codebases for secrets
- Supports multiple version control systems
- Offers a verification feature
- Can filter results based on regex
- Automated scanning and reporting
Recorded alternatives to Trufflehog
Trufflehog resources
Trufflehog on GitHub
Frequently asked questions
What is Trufflehog?
Find, verify, and analyze leaked credentials. TruffleHog is a security tool designed to scan your codebases for secrets and sensitive data such as passwords and API keys. This directory highlights Scans codebases for secrets, Supports multiple version control systems, Offers a verification feature.
Is Trufflehog free to use?
Trufflehog is published as open source under the GNU Affero General Public License v3.0. The directory lists Scans codebases for secrets, Supports multiple version control systems, Offers a verification feature among its recorded capabilities.
What language is Trufflehog written in, and what is the latest release?
Trufflehog is written primarily in Go. The latest release tracked on this page is v3.94.3.
How widely is Trufflehog used on GitHub?
Trufflehog has about 25.7k GitHub stars across about 100 contributors. It also has about 2.3k forks. Those counts are a snapshot of community attention, not a ranking of quality.
What do people compare Trufflehog with?
This directory records GitGuardian, Gitleaks, Talisman as comparison points for Trufflehog.
More Security tools
Maigret
Maigret is a tool to collect a dossier on a person by username from thousands of sites, providing a comprehensive OSINT solution.
HackingTool
A comprehensive all-in-one hacking tool designed for hackers, providing a variety of features for security testing and exploitation.
Villain
Villain is an advanced stage 0/1 Command and Control (C2) framework designed to manage multiple reverse TCP and HoaxShell-based shells, enhancing their functionality with additional features, and allowing sharing among connected sibling servers running on different machines.
Vault
A comprehensive tool for secrets management, encryption as a service, and privileged access management, providing high security and control.
Zitadel
ZITADEL is a modern identity infrastructure that simplifies authentication and authorization for developers, providing advanced features like multi-factor authentication and single sign-on.
Mkcert
A simple zero-config tool designed to create locally trusted development certificates for any domain, enhancing local SSL/TLS setup.