{"data":{"slug":"trufflehog","name":"TruffleHog","tagline":"A tool that finds and helps remediate exposed secrets and credentials across your entire infrastructure and development pipeline.","homepage":"https://trufflesecurity.com","category":{"slug":"devsecops","name":"DevSecOps Tools"},"vendor":{"name":"Truffle Security Co.","primaryDomain":null},"score":{"composite":58.8,"confidence":0.41,"confidenceBand":"low","breakdown":{"capabilities":{"value":81.2,"weight":0.063,"present":true,"contribution":5.1},"repo_stars":{"value":83.8,"weight":0.026,"present":true,"contribution":2.2},"integrations":{"value":38,"weight":0.063,"present":true,"contribution":2.4},"dependent_projects":{"value":45.3,"weight":0.063,"present":true,"contribution":2.9},"dev_activity":{"value":51.7,"weight":0.094,"present":true,"contribution":4.9},"release_cadence":{"value":96.1,"weight":0.052,"present":true,"contribution":5},"security_posture":{"value":5,"weight":0.209,"present":false,"contribution":0},"package_downloads":{"value":0,"weight":0.136,"present":false,"contribution":0},"security_score":{"value":74,"weight":0.042,"present":true,"contribution":3.1},"community_qa_activity":{"value":0,"weight":0.063,"present":false,"contribution":0}},"computedAt":"2026-09-14T15:47:08.747Z","stale":false},"uri":"https://www.vioscale.ai/software/trufflehog","aliases":["trufflehog"],"status":"published","crawlStatus":"ok","indexStatus":"indexed","nextCrawlAt":"2026-09-28T15:47:08.951Z","categories":[{"slug":"devsecops","name":"DevSecOps Tools","isPrimary":true}],"facts":{"activity":[{"attribute":"activity.commits_last_30d","value":43,"provenance":{"source":"https://github.com/trufflesecurity/trufflehog/pulse","sourceType":"vioscale-crawler","retrievedAt":"2026-09-11T15:58:22.111Z","confidence":0.65}}],"adoption":[{"attribute":"adoption.github_stars","value":27789,"provenance":{"source":"https://github.com/trufflesecurity/trufflehog","sourceType":"vioscale-crawler","retrievedAt":"2026-09-11T15:58:22.111Z","confidence":0.9}},{"attribute":"adoption.dependent_repos","value":519,"provenance":{"source":"https://packages.ecosyste.ms/api/v1/packages/lookup?repository_url=https%3A%2F%2Fgithub.com%2Ftrufflesecurity%2Ftrufflehog","sourceType":"vioscale-crawler","retrievedAt":"2026-08-26T18:55:12.612Z","confidence":0.85}}],"deployment":[{"attribute":"deployment.options","value":{"cloud":true,"self_hosted":true},"provenance":{"source":"https://trufflesecurity.com/pricing","sourceType":"vioscale-crawler","retrievedAt":"2026-09-14T15:37:39.614Z","confidence":0.6}}],"integrations":[{"attribute":"integrations.count","value":20,"provenance":{"source":"https://trufflesecurity.com/pricing","sourceType":"vioscale-crawler","retrievedAt":"2026-09-14T15:37:39.614Z","confidence":0.6}},{"attribute":"integrations.list","value":[{"name":"GitHub"},{"name":"GitLab"},{"name":"Bitbucket"},{"name":"Gerrit"},{"name":"Git"},{"name":"Docker"},{"name":"Artifactory"},{"name":"Jenkins"},{"name":"Buildkite"},{"name":"Azure Repos"},{"name":"Travis CI"},{"name":"Circle CI"},{"name":"Slack"},{"name":"Teams"},{"name":"Jira"},{"name":"Vector"},{"name":"Confluence"},{"name":"Google Drive"},{"name":"S3"},{"name":"SharePoint"},{"name":"Splunk"},{"name":"Webhook"},{"name":"Email"},{"name":"Microsoft Teams","native":true,"category":"chat","direction":"outbound"},{"name":"Discord","category":"chat","direction":"inbound"},{"name":"Elasticsearch","category":"logging","direction":"inbound"},{"name":"AWS S3","category":"cloud_storage","direction":"inbound"},{"name":"Google Cloud Storage","category":"cloud_storage","direction":"inbound"},{"name":"AWS Secrets Manager","category":"secrets_management","direction":"inbound"},{"name":"GitHub App","native":true,"category":"authentication"}],"provenance":{"source":"https://trufflesecurity.com/pricing","sourceType":"vioscale-crawler","retrievedAt":"2026-09-14T15:37:39.614Z","confidence":0.6}}],"language":[{"attribute":"language.primary","value":"Go","provenance":{"source":"https://github.com/trufflesecurity/trufflehog","sourceType":"vioscale-crawler","retrievedAt":"2026-09-11T15:58:22.111Z","confidence":0.9}}],"license":[{"attribute":"license.spdx","value":"AGPL-3.0","provenance":{"source":"https://github.com/trufflesecurity/trufflehog","sourceType":"vioscale-crawler","retrievedAt":"2026-09-11T15:58:22.111Z","confidence":0.95}}],"platform":[{"attribute":"platform.support","value":{"cli":true,"web":true,"linux":true},"provenance":{"source":"https://trufflesecurity.com/pricing","sourceType":"vioscale-crawler","retrievedAt":"2026-09-14T15:37:39.614Z","confidence":0.6}}],"pricing":[{"attribute":"pricing.free_tier","value":true,"provenance":{"source":"https://trufflesecurity.com/pricing","sourceType":"vioscale-crawler","retrievedAt":"2026-09-14T15:37:39.614Z","confidence":0.6}},{"attribute":"pricing.model","value":"freemium","provenance":{"source":"https://trufflesecurity.com/pricing","sourceType":"vioscale-crawler","retrievedAt":"2026-09-14T15:37:39.614Z","confidence":0.6}},{"attribute":"pricing.price_level","value":"low","provenance":{"source":"https://trufflesecurity.com/pricing","sourceType":"vioscale-crawler","retrievedAt":"2026-09-14T15:37:39.614Z","confidence":0.6}},{"attribute":"pricing.transparent","value":false,"provenance":{"source":"https://trufflesecurity.com/pricing","sourceType":"vioscale-crawler","retrievedAt":"2026-09-14T15:37:39.614Z","confidence":0.6}},{"attribute":"pricing","value":{"type":"hybrid","plans":[{"free":true,"name":"Free","features":["GitHub, S3, directory, GCS, and Docker scanning","800+ secret detectors","GitHub actions, pre-commit, and pre-receive hooks","Custom regex and secrets verification","Automatic updates"],"description":"Open-source tier with scanning across GitHub, S3, directories, GCS, and Docker","contactSales":false},{"free":false,"name":"TruffleHog Analyze for SaaS","contactSales":true},{"free":false,"name":"TruffleHog Analyze for Cloud","contactSales":true}],"summary":"Free tier available; enterprise tiers available via contact","currency":"USD","freeTier":true,"sourceUrl":"https://trufflesecurity.com/pricing","retrievedAt":"2026-09-14T15:37:39.614Z"},"provenance":{"source":"https://trufflesecurity.com/pricing","sourceType":"vioscale-crawler","retrievedAt":"2026-09-14T15:37:39.614Z","confidence":0.6}}],"release":[{"attribute":"release.cadence_days","value":7,"provenance":{"source":"https://github.com/trufflesecurity/trufflehog/releases","sourceType":"vioscale-crawler","retrievedAt":"2026-09-11T15:58:22.111Z","confidence":0.7}},{"attribute":"release.history","value":[{"url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.97.4","date":"2026-09-03T20:01:40Z","type":"stable","version":"v3.97.4"},{"url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.97.3","date":"2026-09-03T16:52:51Z","type":"stable","version":"v3.97.3"},{"url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.97.2","date":"2026-09-02T16:55:13Z","type":"stable","version":"v3.97.2"},{"url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.97.1","date":"2026-08-24T16:53:20Z","type":"stable","version":"v3.97.1"},{"url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.97.0","date":"2026-08-14T18:35:16Z","type":"stable","version":"v3.97.0"},{"url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.96.0","date":"2026-07-24T18:23:23Z","type":"stable","version":"v3.96.0"},{"url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.95.9","date":"2026-07-09T23:09:52Z","type":"stable","version":"v3.95.9"},{"url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.95.8","date":"2026-07-02T18:54:37Z","type":"stable","version":"v3.95.8"},{"url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.95.7","date":"2026-06-29T15:50:35Z","type":"stable","version":"v3.95.7"},{"url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.95.6","date":"2026-06-18T14:38:38Z","type":"stable","version":"v3.95.6"},{"url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.95.5","date":"2026-06-02T16:10:06Z","type":"stable","version":"v3.95.5"},{"url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.95.4","date":"2026-06-02T06:20:51Z","type":"stable","version":"v3.95.4"},{"url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.95.3","date":"2026-05-11T18:38:34Z","type":"stable","version":"v3.95.3"},{"url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.95.2","date":"2026-04-21T20:29:49Z","type":"stable","version":"v3.95.2"},{"url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.95.1","date":"2026-04-21T18:12:48Z","type":"stable","version":"v3.95.1"},{"url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.95.0","date":"2026-04-21T17:39:24Z","type":"stable","version":"v3.95.0"},{"url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.94.3","date":"2026-04-08T17:02:29Z","type":"stable","version":"v3.94.3"},{"url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.94.2","date":"2026-04-01T13:03:44Z","type":"stable","version":"v3.94.2"},{"url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.94.1","date":"2026-03-25T16:18:15Z","type":"stable","version":"v3.94.1"},{"url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.94.0","date":"2026-03-20T14:51:55Z","type":"stable","version":"v3.94.0"}],"provenance":{"source":"https://github.com/trufflesecurity/trufflehog/releases","sourceType":"vioscale-crawler","retrievedAt":"2026-09-11T15:58:22.111Z","confidence":0.7}}],"reliability":[{"attribute":"reliability.status_page","value":true,"provenance":{"source":"https://status.trufflesecurity.com","sourceType":"vioscale-crawler","retrievedAt":"2026-08-01T15:02:53.474Z","confidence":0.6}},{"attribute":"reliability.sla_pct","value":99,"provenance":{"source":"https://trufflesecurity.com/pricing","sourceType":"vioscale-crawler","retrievedAt":"2026-08-14T15:25:30.270Z","confidence":0.6}}],"description":[{"attribute":"description.long","value":"TruffleHog detects leaked secrets—such as API keys, passwords, and tokens—across version control systems, cloud platforms, chat applications, and other tools in your SDLC. It verifies whether exposed credentials are live and at risk, then helps teams automate remediation.","provenance":{"source":"https://trufflesecurity.com/pricing","sourceType":"vioscale-crawler","retrievedAt":"2026-09-14T15:37:39.614Z","confidence":0.6}}],"features":[{"attribute":"features.capabilities","value":{"sca":false,"sast":true,"hosting":"both","ci_native":true,"open_source":true,"reachability":true,"secret_scanning":true,"container_scanning":true},"provenance":{"source":"https://trufflesecurity.com/pricing","sourceType":"vioscale-crawler","retrievedAt":"2026-09-14T15:37:39.614Z","confidence":0.6}}],"market":[{"attribute":"market.availability","value":{"primaryMarkets":["US"],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]},"provenance":{"source":"https://trufflesecurity.com/pricing","sourceType":"vioscale-crawler","retrievedAt":"2026-09-14T15:37:39.614Z","confidence":0.5}}],"security":[{"attribute":"security.gdpr","value":true,"provenance":{"source":"https://trufflesecurity.com/security","sourceType":"vioscale-crawler","retrievedAt":"2026-09-14T15:37:39.614Z","confidence":0.75}},{"attribute":"security.scorecard","value":7.4,"provenance":{"source":"https://api.securityscorecards.dev/projects/github.com/trufflesecurity/trufflehog","sourceType":"vioscale-crawler","retrievedAt":"2026-09-11T15:58:22.206Z","confidence":0.9}},{"attribute":"security.trust_center","value":"https://trufflesecurity.com/security","provenance":{"source":"https://trufflesecurity.com/pricing","sourceType":"vioscale-crawler","retrievedAt":"2026-09-14T15:37:39.614Z","confidence":0.6}}],"content":[{"attribute":"content.faq","value":[{"answer":"A security tool that scans code repositories, chat systems, artifact storage, and other SDLC platforms for leaked credentials. It verifies which secrets remain active and provides continuous monitoring and remediation guidance. It is indexed under DevSecOps Tools.","source":"https://trufflesecurity.com/pricing","question":"What is TruffleHog?","confidence":0.6},{"answer":"TruffleHog is open source, so it can be self-hosted and used at no licence cost. It is released under the AGPL-3.0 licence. Pricing changes often, so verify at source before relying on it.","source":"https://trufflesecurity.com/pricing","question":"Is TruffleHog free to use?","confidence":0.6},{"answer":"TruffleHog supports the web and a command-line interface. Platforms we have not confirmed are simply not listed here rather than ruled out.","source":"https://trufflesecurity.com/pricing","question":"What platforms does TruffleHog support?","confidence":0.6},{"answer":"Yes. TruffleHog can be deployed cloud / SaaS, on-premise and self-hosted, so it does not have to run on the vendor's infrastructure.","source":"https://trufflesecurity.com/pricing","question":"Can TruffleHog be self-hosted?","confidence":0.6},{"answer":"We have confirmed 22 integrations for TruffleHog, including GitHub, GitLab, Bitbucket, Gerrit, Docker, Artifactory, Jenkins and Buildkite, plus 14 more. This is what we could verify from public sources, so the vendor may support others we have not indexed.","source":"https://trufflesecurity.com/pricing","question":"What does TruffleHog integrate with?","confidence":0.6},{"answer":"We have independently confirmed GDPR for TruffleHog. Certifications we do not list are ones we have not been able to verify from public sources, which is not the same as TruffleHog not holding them. Always confirm compliance directly before you rely on it.","source":"https://trufflesecurity.com/security","question":"What security certifications does TruffleHog have?","confidence":0.7},{"answer":"Yes. TruffleHog is published under the AGPL-3.0 licence, a copyleft licence, so check its terms before embedding it in a closed-source product. Licence terms can change between releases, so verify against the repository for the version you intend to use.","source":"https://github.com/trufflesecurity/trufflehog","question":"Is TruffleHog open source?","confidence":0.95},{"answer":"TruffleHog is available worldwide. Its primary market is the United States.","source":"https://trufflesecurity.com/pricing","question":"Where is TruffleHog available?","confidence":0.5}],"provenance":{"source":"https://trufflesecurity.com/pricing","sourceType":"vioscale-crawler","retrievedAt":"2026-09-10T10:20:57.389Z","confidence":0.64375}}]},"factList":[{"attribute":"activity.commits_last_30d","value":43,"provenance":{"source":"https://github.com/trufflesecurity/trufflehog/pulse","sourceType":"vioscale-crawler","retrievedAt":"2026-09-11T15:58:22.111Z","confidence":0.65}},{"attribute":"adoption.github_stars","value":27789,"provenance":{"source":"https://github.com/trufflesecurity/trufflehog","sourceType":"vioscale-crawler","retrievedAt":"2026-09-11T15:58:22.111Z","confidence":0.9}},{"attribute":"deployment.options","value":{"cloud":true,"self_hosted":true},"provenance":{"source":"https://trufflesecurity.com/pricing","sourceType":"vioscale-crawler","retrievedAt":"2026-09-14T15:37:39.614Z","confidence":0.6}},{"attribute":"integrations.count","value":20,"provenance":{"source":"https://trufflesecurity.com/pricing","sourceType":"vioscale-crawler","retrievedAt":"2026-09-14T15:37:39.614Z","confidence":0.6}},{"attribute":"language.primary","value":"Go","provenance":{"source":"https://github.com/trufflesecurity/trufflehog","sourceType":"vioscale-crawler","retrievedAt":"2026-09-11T15:58:22.111Z","confidence":0.9}},{"attribute":"license.spdx","value":"AGPL-3.0","provenance":{"source":"https://github.com/trufflesecurity/trufflehog","sourceType":"vioscale-crawler","retrievedAt":"2026-09-11T15:58:22.111Z","confidence":0.95}},{"attribute":"platform.support","value":{"cli":true,"web":true,"linux":true},"provenance":{"source":"https://trufflesecurity.com/pricing","sourceType":"vioscale-crawler","retrievedAt":"2026-09-14T15:37:39.614Z","confidence":0.6}},{"attribute":"pricing.free_tier","value":true,"provenance":{"source":"https://trufflesecurity.com/pricing","sourceType":"vioscale-crawler","retrievedAt":"2026-09-14T15:37:39.614Z","confidence":0.6}},{"attribute":"pricing.model","value":"freemium","provenance":{"source":"https://trufflesecurity.com/pricing","sourceType":"vioscale-crawler","retrievedAt":"2026-09-14T15:37:39.614Z","confidence":0.6}},{"attribute":"pricing.price_level","value":"low","provenance":{"source":"https://trufflesecurity.com/pricing","sourceType":"vioscale-crawler","retrievedAt":"2026-09-14T15:37:39.614Z","confidence":0.6}},{"attribute":"pricing.transparent","value":false,"provenance":{"source":"https://trufflesecurity.com/pricing","sourceType":"vioscale-crawler","retrievedAt":"2026-09-14T15:37:39.614Z","confidence":0.6}},{"attribute":"release.cadence_days","value":7,"provenance":{"source":"https://github.com/trufflesecurity/trufflehog/releases","sourceType":"vioscale-crawler","retrievedAt":"2026-09-11T15:58:22.111Z","confidence":0.7}},{"attribute":"reliability.status_page","value":true,"provenance":{"source":"https://status.trufflesecurity.com","sourceType":"vioscale-crawler","retrievedAt":"2026-08-01T15:02:53.474Z","confidence":0.6}},{"attribute":"description.long","value":"TruffleHog detects leaked secrets—such as API keys, passwords, and tokens—across version control systems, cloud platforms, chat applications, and other tools in your SDLC. It verifies whether exposed credentials are live and at risk, then helps teams automate remediation.","provenance":{"source":"https://trufflesecurity.com/pricing","sourceType":"vioscale-crawler","retrievedAt":"2026-09-14T15:37:39.614Z","confidence":0.6}},{"attribute":"pricing","value":{"type":"hybrid","plans":[{"free":true,"name":"Free","features":["GitHub, S3, directory, GCS, and Docker scanning","800+ secret detectors","GitHub actions, pre-commit, and pre-receive hooks","Custom regex and secrets verification","Automatic updates"],"description":"Open-source tier with scanning across GitHub, S3, directories, GCS, and Docker","contactSales":false},{"free":false,"name":"TruffleHog Analyze for SaaS","contactSales":true},{"free":false,"name":"TruffleHog Analyze for Cloud","contactSales":true}],"summary":"Free tier available; enterprise tiers available via contact","currency":"USD","freeTier":true,"sourceUrl":"https://trufflesecurity.com/pricing","retrievedAt":"2026-09-14T15:37:39.614Z"},"provenance":{"source":"https://trufflesecurity.com/pricing","sourceType":"vioscale-crawler","retrievedAt":"2026-09-14T15:37:39.614Z","confidence":0.6}},{"attribute":"features.capabilities","value":{"sca":false,"sast":true,"hosting":"both","ci_native":true,"open_source":true,"reachability":true,"secret_scanning":true,"container_scanning":true},"provenance":{"source":"https://trufflesecurity.com/pricing","sourceType":"vioscale-crawler","retrievedAt":"2026-09-14T15:37:39.614Z","confidence":0.6}},{"attribute":"market.availability","value":{"primaryMarkets":["US"],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]},"provenance":{"source":"https://trufflesecurity.com/pricing","sourceType":"vioscale-crawler","retrievedAt":"2026-09-14T15:37:39.614Z","confidence":0.5}},{"attribute":"security.gdpr","value":true,"provenance":{"source":"https://trufflesecurity.com/security","sourceType":"vioscale-crawler","retrievedAt":"2026-09-14T15:37:39.614Z","confidence":0.75}},{"attribute":"reliability.sla_pct","value":99,"provenance":{"source":"https://trufflesecurity.com/pricing","sourceType":"vioscale-crawler","retrievedAt":"2026-08-14T15:25:30.270Z","confidence":0.6}},{"attribute":"adoption.dependent_repos","value":519,"provenance":{"source":"https://packages.ecosyste.ms/api/v1/packages/lookup?repository_url=https%3A%2F%2Fgithub.com%2Ftrufflesecurity%2Ftrufflehog","sourceType":"vioscale-crawler","retrievedAt":"2026-08-26T18:55:12.612Z","confidence":0.85}},{"attribute":"release.history","value":[{"url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.97.4","date":"2026-09-03T20:01:40Z","type":"stable","version":"v3.97.4"},{"url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.97.3","date":"2026-09-03T16:52:51Z","type":"stable","version":"v3.97.3"},{"url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.97.2","date":"2026-09-02T16:55:13Z","type":"stable","version":"v3.97.2"},{"url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.97.1","date":"2026-08-24T16:53:20Z","type":"stable","version":"v3.97.1"},{"url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.97.0","date":"2026-08-14T18:35:16Z","type":"stable","version":"v3.97.0"},{"url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.96.0","date":"2026-07-24T18:23:23Z","type":"stable","version":"v3.96.0"},{"url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.95.9","date":"2026-07-09T23:09:52Z","type":"stable","version":"v3.95.9"},{"url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.95.8","date":"2026-07-02T18:54:37Z","type":"stable","version":"v3.95.8"},{"url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.95.7","date":"2026-06-29T15:50:35Z","type":"stable","version":"v3.95.7"},{"url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.95.6","date":"2026-06-18T14:38:38Z","type":"stable","version":"v3.95.6"},{"url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.95.5","date":"2026-06-02T16:10:06Z","type":"stable","version":"v3.95.5"},{"url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.95.4","date":"2026-06-02T06:20:51Z","type":"stable","version":"v3.95.4"},{"url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.95.3","date":"2026-05-11T18:38:34Z","type":"stable","version":"v3.95.3"},{"url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.95.2","date":"2026-04-21T20:29:49Z","type":"stable","version":"v3.95.2"},{"url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.95.1","date":"2026-04-21T18:12:48Z","type":"stable","version":"v3.95.1"},{"url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.95.0","date":"2026-04-21T17:39:24Z","type":"stable","version":"v3.95.0"},{"url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.94.3","date":"2026-04-08T17:02:29Z","type":"stable","version":"v3.94.3"},{"url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.94.2","date":"2026-04-01T13:03:44Z","type":"stable","version":"v3.94.2"},{"url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.94.1","date":"2026-03-25T16:18:15Z","type":"stable","version":"v3.94.1"},{"url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.94.0","date":"2026-03-20T14:51:55Z","type":"stable","version":"v3.94.0"}],"provenance":{"source":"https://github.com/trufflesecurity/trufflehog/releases","sourceType":"vioscale-crawler","retrievedAt":"2026-09-11T15:58:22.111Z","confidence":0.7}},{"attribute":"security.scorecard","value":7.4,"provenance":{"source":"https://api.securityscorecards.dev/projects/github.com/trufflesecurity/trufflehog","sourceType":"vioscale-crawler","retrievedAt":"2026-09-11T15:58:22.206Z","confidence":0.9}},{"attribute":"content.faq","value":[{"answer":"A security tool that scans code repositories, chat systems, artifact storage, and other SDLC platforms for leaked credentials. It verifies which secrets remain active and provides continuous monitoring and remediation guidance. It is indexed under DevSecOps Tools.","source":"https://trufflesecurity.com/pricing","question":"What is TruffleHog?","confidence":0.6},{"answer":"TruffleHog is open source, so it can be self-hosted and used at no licence cost. It is released under the AGPL-3.0 licence. Pricing changes often, so verify at source before relying on it.","source":"https://trufflesecurity.com/pricing","question":"Is TruffleHog free to use?","confidence":0.6},{"answer":"TruffleHog supports the web and a command-line interface. Platforms we have not confirmed are simply not listed here rather than ruled out.","source":"https://trufflesecurity.com/pricing","question":"What platforms does TruffleHog support?","confidence":0.6},{"answer":"Yes. TruffleHog can be deployed cloud / SaaS, on-premise and self-hosted, so it does not have to run on the vendor's infrastructure.","source":"https://trufflesecurity.com/pricing","question":"Can TruffleHog be self-hosted?","confidence":0.6},{"answer":"We have confirmed 22 integrations for TruffleHog, including GitHub, GitLab, Bitbucket, Gerrit, Docker, Artifactory, Jenkins and Buildkite, plus 14 more. This is what we could verify from public sources, so the vendor may support others we have not indexed.","source":"https://trufflesecurity.com/pricing","question":"What does TruffleHog integrate with?","confidence":0.6},{"answer":"We have independently confirmed GDPR for TruffleHog. Certifications we do not list are ones we have not been able to verify from public sources, which is not the same as TruffleHog not holding them. Always confirm compliance directly before you rely on it.","source":"https://trufflesecurity.com/security","question":"What security certifications does TruffleHog have?","confidence":0.7},{"answer":"Yes. TruffleHog is published under the AGPL-3.0 licence, a copyleft licence, so check its terms before embedding it in a closed-source product. Licence terms can change between releases, so verify against the repository for the version you intend to use.","source":"https://github.com/trufflesecurity/trufflehog","question":"Is TruffleHog open source?","confidence":0.95},{"answer":"TruffleHog is available worldwide. Its primary market is the United States.","source":"https://trufflesecurity.com/pricing","question":"Where is TruffleHog available?","confidence":0.5}],"provenance":{"source":"https://trufflesecurity.com/pricing","sourceType":"vioscale-crawler","retrievedAt":"2026-09-10T10:20:57.389Z","confidence":0.64375}},{"attribute":"integrations.list","value":[{"name":"GitHub"},{"name":"GitLab"},{"name":"Bitbucket"},{"name":"Gerrit"},{"name":"Git"},{"name":"Docker"},{"name":"Artifactory"},{"name":"Jenkins"},{"name":"Buildkite"},{"name":"Azure Repos"},{"name":"Travis CI"},{"name":"Circle CI"},{"name":"Slack"},{"name":"Teams"},{"name":"Jira"},{"name":"Vector"},{"name":"Confluence"},{"name":"Google Drive"},{"name":"S3"},{"name":"SharePoint"},{"name":"Splunk"},{"name":"Webhook"},{"name":"Email"},{"name":"Microsoft Teams","native":true,"category":"chat","direction":"outbound"},{"name":"Discord","category":"chat","direction":"inbound"},{"name":"Elasticsearch","category":"logging","direction":"inbound"},{"name":"AWS S3","category":"cloud_storage","direction":"inbound"},{"name":"Google Cloud Storage","category":"cloud_storage","direction":"inbound"},{"name":"AWS Secrets Manager","category":"secrets_management","direction":"inbound"},{"name":"GitHub App","native":true,"category":"authentication"}],"provenance":{"source":"https://trufflesecurity.com/pricing","sourceType":"vioscale-crawler","retrievedAt":"2026-09-14T15:37:39.614Z","confidence":0.6}},{"attribute":"security.trust_center","value":"https://trufflesecurity.com/security","provenance":{"source":"https://trufflesecurity.com/pricing","sourceType":"vioscale-crawler","retrievedAt":"2026-09-14T15:37:39.614Z","confidence":0.6}}],"faq":[{"answer":"A security tool that scans code repositories, chat systems, artifact storage, and other SDLC platforms for leaked credentials. It verifies which secrets remain active and provides continuous monitoring and remediation guidance. It is indexed under DevSecOps Tools.","source":"https://trufflesecurity.com/pricing","question":"What is TruffleHog?","confidence":0.6},{"answer":"TruffleHog is open source, so it can be self-hosted and used at no licence cost. It is released under the AGPL-3.0 licence. Pricing changes often, so verify at source before relying on it.","source":"https://trufflesecurity.com/pricing","question":"Is TruffleHog free to use?","confidence":0.6},{"answer":"TruffleHog supports the web and a command-line interface. Platforms we have not confirmed are simply not listed here rather than ruled out.","source":"https://trufflesecurity.com/pricing","question":"What platforms does TruffleHog support?","confidence":0.6},{"answer":"Yes. TruffleHog can be deployed cloud / SaaS, on-premise and self-hosted, so it does not have to run on the vendor's infrastructure.","source":"https://trufflesecurity.com/pricing","question":"Can TruffleHog be self-hosted?","confidence":0.6},{"answer":"We have confirmed 22 integrations for TruffleHog, including GitHub, GitLab, Bitbucket, Gerrit, Docker, Artifactory, Jenkins and Buildkite, plus 14 more. This is what we could verify from public sources, so the vendor may support others we have not indexed.","source":"https://trufflesecurity.com/pricing","question":"What does TruffleHog integrate with?","confidence":0.6},{"answer":"We have independently confirmed GDPR for TruffleHog. Certifications we do not list are ones we have not been able to verify from public sources, which is not the same as TruffleHog not holding them. Always confirm compliance directly before you rely on it.","source":"https://trufflesecurity.com/security","question":"What security certifications does TruffleHog have?","confidence":0.7},{"answer":"Yes. TruffleHog is published under the AGPL-3.0 licence, a copyleft licence, so check its terms before embedding it in a closed-source product. Licence terms can change between releases, so verify against the repository for the version you intend to use.","source":"https://github.com/trufflesecurity/trufflehog","question":"Is TruffleHog open source?","confidence":0.95},{"answer":"TruffleHog is available worldwide. Its primary market is the United States.","source":"https://trufflesecurity.com/pricing","question":"Where is TruffleHog available?","confidence":0.5}],"faqSource":"generated","market":{"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[],"primaryMarkets":["US"]},"releaseHistory":[{"version":"v3.97.4","date":"2026-09-03T20:01:40Z","url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.97.4","type":"stable"},{"version":"v3.97.3","date":"2026-09-03T16:52:51Z","url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.97.3","type":"stable"},{"version":"v3.97.2","date":"2026-09-02T16:55:13Z","url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.97.2","type":"stable"},{"version":"v3.97.1","date":"2026-08-24T16:53:20Z","url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.97.1","type":"stable"},{"version":"v3.97.0","date":"2026-08-14T18:35:16Z","url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.97.0","type":"stable"},{"version":"v3.96.0","date":"2026-07-24T18:23:23Z","url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.96.0","type":"stable"},{"version":"v3.95.9","date":"2026-07-09T23:09:52Z","url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.95.9","type":"stable"},{"version":"v3.95.8","date":"2026-07-02T18:54:37Z","url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.95.8","type":"stable"},{"version":"v3.95.7","date":"2026-06-29T15:50:35Z","url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.95.7","type":"stable"},{"version":"v3.95.6","date":"2026-06-18T14:38:38Z","url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.95.6","type":"stable"},{"version":"v3.95.5","date":"2026-06-02T16:10:06Z","url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.95.5","type":"stable"},{"version":"v3.95.4","date":"2026-06-02T06:20:51Z","url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.95.4","type":"stable"},{"version":"v3.95.3","date":"2026-05-11T18:38:34Z","url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.95.3","type":"stable"},{"version":"v3.95.2","date":"2026-04-21T20:29:49Z","url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.95.2","type":"stable"},{"version":"v3.95.1","date":"2026-04-21T18:12:48Z","url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.95.1","type":"stable"},{"version":"v3.95.0","date":"2026-04-21T17:39:24Z","url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.95.0","type":"stable"},{"version":"v3.94.3","date":"2026-04-08T17:02:29Z","url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.94.3","type":"stable"},{"version":"v3.94.2","date":"2026-04-01T13:03:44Z","url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.94.2","type":"stable"},{"version":"v3.94.1","date":"2026-03-25T16:18:15Z","url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.94.1","type":"stable"},{"version":"v3.94.0","date":"2026-03-20T14:51:55Z","url":"https://github.com/trufflesecurity/trufflehog/releases/tag/v3.94.0","type":"stable"}],"integrations":[{"name":"GitHub"},{"name":"GitLab"},{"name":"Bitbucket"},{"name":"Gerrit"},{"name":"Git"},{"name":"Docker"},{"name":"Artifactory"},{"name":"Jenkins"},{"name":"Buildkite"},{"name":"Azure Repos"},{"name":"Travis CI"},{"name":"Circle CI"},{"name":"Slack"},{"name":"Teams"},{"name":"Jira"},{"name":"Vector"},{"name":"Confluence"},{"name":"Google Drive"},{"name":"S3"},{"name":"SharePoint"},{"name":"Splunk"},{"name":"Webhook"},{"name":"Email"},{"name":"Microsoft Teams","category":"chat","direction":"outbound","native":true},{"name":"Discord","category":"chat","direction":"inbound"},{"name":"Elasticsearch","category":"logging","direction":"inbound"},{"name":"AWS S3","category":"cloud_storage","direction":"inbound"},{"name":"Google Cloud Storage","category":"cloud_storage","direction":"inbound"},{"name":"AWS Secrets Manager","category":"secrets_management","direction":"inbound"},{"name":"GitHub App","category":"authentication","native":true}],"claimed":false,"updatedAt":"2026-09-14T15:47:08.951Z","formats":{"json":"https://www.vioscale.ai/api/v1/software/trufflehog","markdown":"https://www.vioscale.ai/software/trufflehog.md","html":"https://www.vioscale.ai/software/trufflehog"}},"meta":{"source":"https://www.vioscale.ai","license":"CC-BY-4.0","generatedAt":"2026-09-21T01:30:42.379Z","disclaimer":"Independent, evidence-based. Every fact carries provenance."}}