TruffleHog finds secrets in Git history, GitHub, GitLab, and S3. It scans historical commits for credentials that were committed and never removed. Security teams use it to find exposed keys in repositories and storage buckets. The product is available at trufflesecurity.com.
How TruffleHog compares with its closest alternatives
All 5 closest alternatives have a free plan, as TruffleHog does. Only iFixAi lists a starting price, $3 a month. 4 of the 5 offer an API, as TruffleHog does. TruffleHog offers a web app and a desktop app. Of the alternatives, 3 offer a web app and 2 offer a desktop app. TruffleHog was founded in 2017; the alternatives were founded between 2011 and 2020, 2 of them earlier. TruffleHog is based in San Francisco, United States; none of the 2 alternatives with a known headquarters is in the United States. They are in Israel.
Market position · Security
How TruffleHog compares in Security
TruffleHog has moderate opportunity and sits in the bottom third of 361 live Security tools on FalcoScan. Across Security, the average opportunity score is 70.4 and the average saturation score 33. FalcoScan rates TruffleHog's own market position as contested. 121 of the 361 operating Security tools have hot momentum, and FalcoScan has recorded 1 shutdown in the category.
TruffleHog compared with its closest alternatives
Product
Opportunity
Saturation
Pricing
Pricing from
Free plan
API
Platforms
Momentum
TruffleHogFounded 2017 · San Francisco, United States
The closest alternatives to TruffleHog that are still running, matched on the AI capabilities, uses and audience they share, are Syft, Mend, iFixAi, Trivy, and Bitwarden Open Source.
Is TruffleHog still running?
Yes. As of 2 November 2026, FalcoScan lists TruffleHog as operating at trufflesecurity.com.
Where is TruffleHog based?
TruffleHog is headquartered in San Francisco, United States.
Does TruffleHog have an API?
Yes. TruffleHog offers an API.
Who is TruffleHog for?
TruffleHog is built for developers and security teams.
How do I sign in to TruffleHog?
Sign in on TruffleHog's own website, trufflesecurity.com. FalcoScan reviews TruffleHog but does not run its accounts, so logins, passwords and billing are handled by TruffleHog directly.