All › Security & Privacy › TruffleHog

TruffleHog

Find, verify and analyze leaked credentials

TruffleHog scans repos, cloud storage and chat tools for secrets and checks whether found credentials are live.

Visit TruffleHog ↗

Pricing: Free plan

Platforms: Mac, Windows, Linux

Categories: Security & Privacy, Developer Tools

TruffleHog compared with similar tools

Product	Price	Open source	Self-host	Platforms
TruffleHog	Free plan	Yes	–	Mac, Windows, Linux
Gitleaks	Free	Yes	–	Mac, Windows, Linux
Trivy	Free	Yes	–	Mac, Windows, Linux
Socket	Free plan	–	–	Web, API
SOPS	Free	Yes	–	Mac, Windows, Linux
LuLu	Free	Yes	–	Mac
Infisical	Free plan	Yes	Yes	Web, Self-hosted, API

Similar to TruffleHog

Gitleaks

Find secrets in Git repositories

Gitleaks is an open-source tool that detects passwords, API keys and tokens in Git history and files.

Free · Mac, Windows, Linux · Website ↗

Trivy

Security scanner for containers, code and cloud

Trivy, from Aqua Security, scans container images, filesystems, Git repos and Kubernetes for vulnerabilities and misconfigurations.

Free · Mac, Windows, Linux · Website ↗

Socket

Detect malicious and risky open-source dependencies

Socket analyzes npm, PyPI and other packages for supply-chain attacks and risky behavior before you install them.

Free plan · Web, API · Website ↗

SOPS

Encrypt values in YAML, JSON and env files

SOPS is a CNCF tool for editing encrypted files that keeps keys readable and encrypts values with age, PGP or cloud KMS.

Free · Mac, Windows, Linux · Website ↗

LuLu

Free, open-source firewall for macOS

A free, open-source macOS firewall from Objective-See that blocks unknown outgoing network connections.

Free · Mac · Website ↗

Infisical

Open-source secrets management platform

Infisical syncs secrets and environment variables to apps and infrastructure, with PKI and secret rotation.

Free plan · Web, Self-hosted, API · Website ↗

Passbolt

Open-source password manager for teams

Passbolt is a self-hostable password manager built for team sharing, based on OpenPGP.

Free plan · Self-hosted, Web, Browser extension, iOS, Android · Website ↗

ZAP

Open-source web app security scanner

ZAP is a widely used open-source dynamic application security testing proxy for finding vulnerabilities in web apps.

Free · Mac, Windows, Linux · Website ↗

Questions

Is TruffleHog free?

TruffleHog is free to start, with paid plans.

Is TruffleHog open source?

Yes, TruffleHog is open source.

What platforms does TruffleHog run on?

TruffleHog is available for Mac, Windows, Linux.

What are some alternatives to TruffleHog?

Similar indie products include Gitleaks, Trivy, Socket, SOPS and 4 more.

Is this your product? Submit an update.