# Spectral vs Tartufo

| Attribute | Spectral | Tartufo |
|---|---|---|
| **Vioscale score** | 35.5 (8% (low)) | 37.8 (32% (low)) |
| activity.commits_last_30d | - | 0 |
| adoption.dependent_repos | - | 3 |
| adoption.github_stars | - | 517 |
| deployment.options | - | `{"self_hosted":true}` |
| description.long | A codebase scanning tool that detects exposed secrets and vulnerabilities across repositories, helping teams prioritize security issues and prevent breaches. | Tartufo searches through git repositories to find high entropy strings and secrets that may have been accidentally committed, helping developers identify potential security risks deep in their version control history. |
| features.capabilities | `{"deployment_model":"cloud_managed_saas","pre_commit_developer_hooks":true,"high_entropy_regex_detection":true,"git_repository_historical_scanning":true}` | - |
| integrations.count | 1 | 1 |
| integrations.list | `[{"name":"Slack"}]` | `[{"name":"pre-commit"}]` |
| language.primary | - | Python |
| license.spdx | - | GPL-2.0 |
| market.availability | `{"primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` | `{"hqCountry":"US","primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` |
| platform.support | - | `{"cli":true,"mac":true,"linux":true,"windows":true}` |
| pricing | - | `{"type":"open_source","sourceUrl":"https://github.com/pricing","retrievedAt":"2026-08-19T21:37:59.570Z"}` |
| pricing.model | - | commercial |
| pricing.price_level | - | free |
| pricing.transparent | - | yes |
| release.cadence_days | - | 35 |
| release.history | - | `[{"url":"https://github.com/godaddy/tartufo/releases/tag/v6.0.0","date":"2025-11-04T17:31:21Z","type":"stable","version":"v6.0.0"},{"url":"https://github.com/godaddy/tartufo/releases/tag/v5.0.2","date":"2024-10-17T23:16:06Z","type":"stable","version":"v5.0.2"},{"url":"https://github.com/godaddy/tartufo/releases/tag/v5.0.1","date":"2024-07-26T13:27:30Z","type":"stable","version":"v5.0.1"},{"url":"https://github.com/godaddy/tartufo/releases/tag/v5.0.0","date":"2024-03-14T21:30:15Z","type":"stable","version":"v5.0.0"},{"url":"https://github.com/godaddy/tartufo/releases/tag/v4.1.0","date":"2023-04-03T20:45:09Z","type":"stable","version":"v4.1.0"},{"url":"https://github.com/godaddy/tartufo/releases/tag/v4.0.1","date":"2023-03-01T21:01:54Z","type":"stable","version":"v4.0.1"},{"url":"https://github.com/godaddy/tartufo/releases/tag/v4.0.0","date":"2023-01-17T23:18:37Z","type":"stable","version":"v4.0.0"},{"url":"https://github.com/godaddy/tartufo/releases/tag/v3.3.1","date":"2022-11-23T22:04:17Z","type":"stable","version":"v3.3.1"},{"url":"https://github.com/godaddy/tartufo/releases/tag/v3.3.0","date":"2022-11-23T00:35:22Z","type":"stable","version":"v3.3.0"},{"url":"https://github.com/godaddy/tartufo/releases/tag/v3.2.1","date":"2022-07-20T18:32:33Z","type":"stable","version":"v3.2.1"},{"url":"https://github.com/godaddy/tartufo/releases/tag/v3.2.0","date":"2022-07-06T19:57:46Z","type":"stable","version":"v3.2.0"},{"url":"https://github.com/godaddy/tartufo/releases/tag/v3.1.4","date":"2022-05-31T23:25:41Z","type":"stable","version":"v3.1.4"},{"url":"https://github.com/godaddy/tartufo/releases/tag/v3.1.3","date":"2022-04-04T23:36:35Z","type":"stable","version":"v3.1.3"},{"url":"https://github.com/godaddy/tartufo/releases/tag/v3.1.2","date":"2022-03-28T22:43:26Z","type":"stable","version":"v3.1.2"},{"url":"https://github.com/godaddy/tartufo/releases/tag/v3.1.1","date":"2022-03-25T15:32:19Z","type":"stable","version":"v3.1.1"},{"url":"https://github.com/godaddy/tartufo/releases/tag/v3.1.0","date":"2022-03-24T21:30:25Z","type":"stable","version":"v3.1.0"},{"url":"https://github.com/godaddy/tartufo/releases/tag/v3.0.0","date":"2022-01-05T22:56:38Z","type":"stable","version":"v3.0.0"},{"url":"https://github.com/godaddy/tartufo/releases/tag/v2.10.1","date":"2021-12-27T20:33:47Z","type":"stable","version":"v2.10.1"},{"url":"https://github.com/godaddy/tartufo/releases/tag/v3.0.0-rc.3","date":"2021-12-13T21:58:57Z","type":"prerelease","version":"v3.0.0-rc.3"},{"url":"https://github.com/godaddy/tartufo/releases/tag/v3.0.0-rc.2","date":"2021-12-10T00:58:17Z","type":"prerelease","version":"v3.0.0-rc.2"}]` |
| security.scorecard | - | 5.6 |
| security.vulnerabilities | - | `{"count":0,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=pypi&package_name=tartufo&per_page=100","last_12m":0,"max_severity":null}` |

## Capabilities (Secrets Scanning)

| Capability | Spectral | Tartufo |
|---|:--:|:--:|
| **Capabilities** |  |  |
| Deployment model | Cloud managed saas | - |
| Git repository historical scanning | ✓ | - |
| Pre commit developer hooks | ✓ | - |
| Active token validation engine | - | - |
| High entropy regex detection | ✓ | - |
| Slack teams jira scanning | - | - |
| Automated key revocation apis | - | - |
| Custom regex rules support | - | - |
| Ci cd pipeline build blocking | - | - |
| Compliance audit reporting | - | - |
| SOC2 type ii | - | - |
| ISO 27001 | - | - |
| Pricing model | - | - |

*Source: Vioscale. Generated 2026-09-01T16:46:35.889Z. "-" = undocumented, not absent.*