Tartufo

Also known as
tartufo

Available worldwide

What is Tartufo?

Tartufo searches through git repositories to find high entropy strings and secrets that may have been accidentally committed, helping developers identify potential security risks deep in their version control history.

Independently observed

Tartufo pricing

We don't have Tartufo's full plan breakdown yet (its pricing page resisted automated reading). Here's what we could confirm. Always check live pricing for exact numbers.

Platform & deployment

Independently observed
Platforms
  • CLI
  • macOS
  • Linux
  • Windows
Deployment
  • Self-hosted

Integrations (1)

Independently observed
  • pre-commit

Security & compliance

Known vulnerabilities: 0 (0 in the last 12 months) sourcea count reflects scale & disclosure, not quality

Tartufo alternatives

Other secrets scanning we track, ranked by the same independent score.

All Tartufo alternatives, ranked →

Independent · unbought · dated

The Vioscale score: one lens on the evidence

Not user reviews and not a paid placement: a confidence-weighted blend of the independent signals below (adoption, activity, security posture, and more), which you can sort and re-weight yourself. Vendors can correct their listing but can never move their rank, and stars are weighted low as a vanity metric. It is one way to read the evidence for Tartufo, not the verdict.

Balanced composite 38 / 100
low · 32%updating
Signal contributions to the composite score
SignalScoreWeightContributionEvidence
Price level1000.055.2
Pricing transparency550.084.6
Release cadence810.054.2
Security score560.042.4
Stars510.031.3
Integrations90.090.8
Dependent projects100.060.6
Reliability00.070.0-
Capabilities00.080.0-
Development activity00.090.0
Security posture00.070.0-
Package downloads00.140.0-
Developer Q&A activity00.060.0-

Computed . Re-weight it by intent, or see the full method.

All data & sourcesshow ↓

Every value we hold, with its source, retrieval date, and confidence. This is the evidence behind the score: don't trust it, verify it.

Activity

AttributeValueEvidence
Commits last 30d0mediumsource · 2026-08-26 · 65%

Adoption

AttributeValueEvidence
Github stars517highsource · 2026-08-26 · 90%
Dependent repos3highsource · 2026-08-26 · 85%

Integrations

AttributeValueEvidence
Count1mediumsource · 2026-08-19 · 60%

Language

AttributeValueEvidence
PrimaryPythonhighsource · 2026-08-26 · 90%

License

AttributeValueEvidence
SpdxGPL-2.0highsource · 2026-08-26 · 95%

Market

AttributeValueEvidence
AvailabilityHqCountry: US · PrimaryMarkets: … · AvailabilityScope: global · AvailableCountries: … · NotAvailableCountries: …highsource · 2026-08-19 · 75%

Pricing

AttributeValueEvidence
Price levelfreemediumsource · 2026-08-19 · 60%
TransparentYesmediumsource · 2026-08-19 · 60%
Modelcommerciallowsource · 2026-08-26 · 40%

Release

AttributeValueEvidence
Cadence days35mediumsource · 2026-08-26 · 70%
History20 itemsmediumsource · 2026-08-26 · 70%

Security

AttributeValueEvidence
Scorecard5.6highsource · 2026-08-26 · 90%
VulnerabilitiesCount: 0 · Source: https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=pypi&package_name=tartufo&per_page=100 · Last 12m: 0highsource · 2026-08-26 · 90%