vioscale
Comparison

git-secrets vs Tartufo

No leader: the top candidate git-secrets has only 0.28 confidence (low), below the 0.35 needed to declare a winner. The attribute-by-attribute breakdown below, with a source and date on every value, is the honest way to compare them.

git-secrets full profile →Tartufo full profile →
Machine formatsJSONMarkdownGraphQLor send Accept: application/json
git-secrets41
Tartufo38
Score
Vioscale score
git-secrets41 / 100low · 28%updating
Tartufo38 / 100low · 32%updating
Pricing
Free tier
git-secrets✓
Tartufo–
Model
git-secretscommercial
Tartufocommercial
Price level
git-secretsfree
Tartufofree
Transparent
git-secrets✓
Tartufo✓
Integrations
Count
git-secrets1
Tartufo1
Security
Scorecard
git-secrets5
Tartufo5.6
Vulnerabilities
Adoption
Dependent repos
git-secrets42
Tartufo3
Github stars
git-secrets13,380
Tartufo517
Activity
Commits last 30d
git-secrets0
Tartufo0
Release
Cadence days
git-secrets–
Tartufo35
History
git-secrets–
Tartufo20 items
License
Spdx
git-secretsApache-2.0
TartufoGPL-2.0
Language
Primary
git-secretsShell
TartufoPython
Market
Availability

Capabilities

Feature-by-feature on the axes that matter for secrets scanning. “-” means undocumented, not absent.

Capabilities
Deployment model
git-secrets-
Tartufo-
Git repository historical scanning
git-secrets-
Tartufo-
Pre commit developer hooks
git-secrets-
Tartufo-
Active token validation engine
git-secrets-
Tartufo-
High entropy regex detection
git-secrets-
Tartufo-
Slack teams jira scanning
git-secrets-
Tartufo-
Automated key revocation apis
git-secrets-
Tartufo-
Custom regex rules support
git-secrets-
Tartufo-
Ci cd pipeline build blocking
git-secrets-
Tartufo-
Compliance audit reporting
git-secrets-
Tartufo-
SOC2 type ii
git-secrets-
Tartufo-
ISO 27001
git-secrets-
Tartufo-
Pricing model
git-secrets-
Tartufo-

What each one is

The product in its own terms, so the numbers below have context.

git-secrets

git-secrets is an open-source command-line utility that integrates with Git as a pre-commit hook to detect and block attempts to commit secrets, API keys, and other sensitive credentials. It uses pattern matching to identify common secret formats and can be customized with additional patterns.

Independently observed

Tartufo

Tartufo searches through git repositories to find high entropy strings and secrets that may have been accidentally committed, helping developers identify potential security risks deep in their version control history.

Independently observed

Pricing

List pricing as published by each vendor, with the date we read it. Always verify at the source before you buy.

git-secrets

Open sourceFree tier

Free and open-source

as of verify ↗

Tartufo

Open source
as of verify ↗

Platform & deployment

Where each product runs and how it can be hosted. A dash means undocumented, not unsupported.

Platforms
macOS
git-secrets✓
Tartufo✓
Windows
git-secrets✓
Tartufo✓
Linux
git-secrets✓
Tartufo✓
CLI
git-secrets✓
Tartufo✓
Deployment
Self-hosted
git-secrets✗
Tartufo✓
On-premise
git-secrets✓
Tartufo✗

Integrations

What each product connects to. Counts come from the vendor's own integration directory where one exists.

git-secrets

1 total
  • Git
Independently observed

Tartufo

1 total
  • pre-commit
Independently observed

Comparison generated from independently-sourced facts. Every value links to its source and retrieval date. See the method.