# BFG Repo-Cleaner vs Tartufo

| Attribute | BFG Repo-Cleaner | Tartufo |
|---|---|---|
| **Vioscale score** | 35.1 (19% (low)) | 37.8 (32% (low)) |
| activity.commits_last_30d | 0 | 0 |
| adoption.dependent_repos | - | 3 |
| adoption.github_stars | 12,175 | 517 |
| deployment.options | `{"self_hosted":true}` | `{"self_hosted":true}` |
| description.long | A command-line tool that removes large blobs and sensitive data from Git repositories. Distributed as free and open source software under the GNU General Public License. | Tartufo searches through git repositories to find high entropy strings and secrets that may have been accidentally committed, helping developers identify potential security risks deep in their version control history. |
| integrations.count | - | 1 |
| integrations.list | - | `[{"name":"pre-commit"}]` |
| language.primary | Scala | Python |
| license.spdx | GPL-3.0 | GPL-2.0 |
| market.availability | - | `{"hqCountry":"US","primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` |
| platform.support | `{"cli":true}` | `{"cli":true,"mac":true,"linux":true,"windows":true}` |
| pricing | `{"type":"open_source","summary":"Free and open source","freeTier":true,"sourceUrl":"https://rtyley.github.io/bfg-repo-cleaner","retrievedAt":"2026-08-19T21:34:36.201Z"}` | `{"type":"open_source","sourceUrl":"https://github.com/pricing","retrievedAt":"2026-08-19T21:37:59.570Z"}` |
| pricing.free_tier | yes | - |
| pricing.model | commercial | commercial |
| pricing.price_level | free | free |
| pricing.transparent | - | yes |
| release.cadence_days | 118 | 35 |
| release.history | `[{"url":"https://github.com/rtyley/bfg-repo-cleaner/releases/tag/v1.15.0","date":"2025-01-18T21:34:32Z","type":"stable","version":"v1.15.0"},{"url":"https://github.com/rtyley/bfg-repo-cleaner/releases/tag/v1.14.0","date":"2021-02-27T16:46:21Z","type":"stable","version":"v1.14.0"},{"url":"https://github.com/rtyley/bfg-repo-cleaner/releases/tag/v1.13.0","date":"2018-01-31T09:26:15Z","type":"stable","version":"v1.13.0"},{"url":"https://github.com/rtyley/bfg-repo-cleaner/releases/tag/v1.12.5","date":"2015-10-01T22:41:36Z","type":"stable","version":"v1.12.5"},{"url":"https://github.com/rtyley/bfg-repo-cleaner/releases/tag/v1.12.4","date":"2015-08-06T08:58:16Z","type":"stable","version":"v1.12.4"},{"url":"https://github.com/rtyley/bfg-repo-cleaner/releases/tag/git-lfs-alpha","date":"2015-04-09T10:11:24Z","type":"prerelease","version":"git-lfs-alpha"},{"url":"https://github.com/rtyley/bfg-repo-cleaner/releases/tag/v1.12.0","date":"2015-01-01T20:14:58Z","type":"stable","version":"v1.12.0"},{"url":"https://github.com/rtyley/bfg-repo-cleaner/releases/tag/v1.11.5","date":"2014-04-20T14:20:59Z","type":"stable","version":"v1.11.5"},{"url":"https://github.com/rtyley/bfg-repo-cleaner/releases/tag/v1.11.2","date":"2014-03-25T09:49:27Z","type":"stable","version":"v1.11.2"},{"url":"https://github.com/rtyley/bfg-repo-cleaner/releases/tag/v1.11.1","date":"2014-02-01T17:33:31Z","type":"stable","version":"v1.11.1"}]` | `[{"url":"https://github.com/godaddy/tartufo/releases/tag/v6.0.0","date":"2025-11-04T17:31:21Z","type":"stable","version":"v6.0.0"},{"url":"https://github.com/godaddy/tartufo/releases/tag/v5.0.2","date":"2024-10-17T23:16:06Z","type":"stable","version":"v5.0.2"},{"url":"https://github.com/godaddy/tartufo/releases/tag/v5.0.1","date":"2024-07-26T13:27:30Z","type":"stable","version":"v5.0.1"},{"url":"https://github.com/godaddy/tartufo/releases/tag/v5.0.0","date":"2024-03-14T21:30:15Z","type":"stable","version":"v5.0.0"},{"url":"https://github.com/godaddy/tartufo/releases/tag/v4.1.0","date":"2023-04-03T20:45:09Z","type":"stable","version":"v4.1.0"},{"url":"https://github.com/godaddy/tartufo/releases/tag/v4.0.1","date":"2023-03-01T21:01:54Z","type":"stable","version":"v4.0.1"},{"url":"https://github.com/godaddy/tartufo/releases/tag/v4.0.0","date":"2023-01-17T23:18:37Z","type":"stable","version":"v4.0.0"},{"url":"https://github.com/godaddy/tartufo/releases/tag/v3.3.1","date":"2022-11-23T22:04:17Z","type":"stable","version":"v3.3.1"},{"url":"https://github.com/godaddy/tartufo/releases/tag/v3.3.0","date":"2022-11-23T00:35:22Z","type":"stable","version":"v3.3.0"},{"url":"https://github.com/godaddy/tartufo/releases/tag/v3.2.1","date":"2022-07-20T18:32:33Z","type":"stable","version":"v3.2.1"},{"url":"https://github.com/godaddy/tartufo/releases/tag/v3.2.0","date":"2022-07-06T19:57:46Z","type":"stable","version":"v3.2.0"},{"url":"https://github.com/godaddy/tartufo/releases/tag/v3.1.4","date":"2022-05-31T23:25:41Z","type":"stable","version":"v3.1.4"},{"url":"https://github.com/godaddy/tartufo/releases/tag/v3.1.3","date":"2022-04-04T23:36:35Z","type":"stable","version":"v3.1.3"},{"url":"https://github.com/godaddy/tartufo/releases/tag/v3.1.2","date":"2022-03-28T22:43:26Z","type":"stable","version":"v3.1.2"},{"url":"https://github.com/godaddy/tartufo/releases/tag/v3.1.1","date":"2022-03-25T15:32:19Z","type":"stable","version":"v3.1.1"},{"url":"https://github.com/godaddy/tartufo/releases/tag/v3.1.0","date":"2022-03-24T21:30:25Z","type":"stable","version":"v3.1.0"},{"url":"https://github.com/godaddy/tartufo/releases/tag/v3.0.0","date":"2022-01-05T22:56:38Z","type":"stable","version":"v3.0.0"},{"url":"https://github.com/godaddy/tartufo/releases/tag/v2.10.1","date":"2021-12-27T20:33:47Z","type":"stable","version":"v2.10.1"},{"url":"https://github.com/godaddy/tartufo/releases/tag/v3.0.0-rc.3","date":"2021-12-13T21:58:57Z","type":"prerelease","version":"v3.0.0-rc.3"},{"url":"https://github.com/godaddy/tartufo/releases/tag/v3.0.0-rc.2","date":"2021-12-10T00:58:17Z","type":"prerelease","version":"v3.0.0-rc.2"}]` |
| security.scorecard | 2.8 | 5.6 |
| security.vulnerabilities | - | `{"count":0,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=pypi&package_name=tartufo&per_page=100","last_12m":0,"max_severity":null}` |

## Capabilities (Secrets Scanning)

| Capability | BFG Repo-Cleaner | Tartufo |
|---|:--:|:--:|
| **Capabilities** |  |  |
| Deployment model | - | - |
| Git repository historical scanning | - | - |
| Pre commit developer hooks | - | - |
| Active token validation engine | - | - |
| High entropy regex detection | - | - |
| Slack teams jira scanning | - | - |
| Automated key revocation apis | - | - |
| Custom regex rules support | - | - |
| Ci cd pipeline build blocking | - | - |
| Compliance audit reporting | - | - |
| SOC2 type ii | - | - |
| ISO 27001 | - | - |
| Pricing model | - | - |

*Source: Vioscale. Generated 2026-09-01T16:49:30.923Z. "-" = undocumented, not absent.*