2026 October
2 min
Find More Secrets
Expand discovery across more areas of the environment and add detection for additional secret types, ensuring no secrets slip through the cracks.
Whats new
- New Detectors: TruffleHog now detects Kong Konnect Platform credentials, Resend API keys, Humio API tokens, and New Relic Insights insert key, license key, and browser key.
- Availability: Enterprise and Open Source
- Include or Exclude Objects in S3 Scans: You can now limit an S3 scan to chosen object prefixes or extensions, or skip some of them. This cuts scan time on large buckets.
- Availability: Enterprise and Open Source
- Okta OAuth Verification: The Okta detector can verify credentials that use OAuth.
- Availability: Enterprise and Open Source
Improvements and Fixes
- More Reliable Jira Scanning: Jira scans no longer retry a rate-limited request indefinitely, skip attachments larger than 25 MB, and match the ignored-projects list regardless of letter case. The scan also fails fast when the Jira endpoint is unreachable and detects Cloud versus Data Center installs more accurately.
- Availability: Enterprise Edition
- Confluence and SharePoint Scanning Fixes: Confluence installs on custom domains no longer fail on a wrong /wiki path. SharePoint search no longer fails with a 400 error.
- Availability: Enterprise Edition
- AWS Analyze Fixes: Cross-account credentials with an assume-role ARN now pass the permission check. Tenants with AWS Analyze but not GCP Analyze can now save AWS credentials.
- Availability: Enterprise Edition
Improve Response
Features here help teams act faster and more effectively when secrets are found, streamlining investigation, triage, and collaboration.
- Scan Errors Appear in the Activity Log: Partial-completion entries in the Activity Log now include the first scan error, and failed-subset entries include the error message.
- Availability: Enterprise Edition
- Last Verified Time on Secret Details: Secret details now show when a secret was last verified.
- Availability: Enterprise Edition
- Active Scans Tab Replaced by Scan Details: The Active scans tab has been replaced by Scan Details on each integration details pages.
- Availability: Enterprise Edition
Ease Administration
Features here simplify ongoing management of the TruffleHog platform, including security hardening, performance improvements, and UI enhancements.
- New Slack Authorization Screen: The Slack authorization screen is redesigned. A failed Slack OAuth now shows the reason on the integrations page.
- Availability: Enterprise Edition
- Detector Exclusions Apply to Queued Findings: Findings already queued before you excluded a detector are now dropped instead of saved.
- Availability: Enterprise Edition
- Archived Sources Are Clearly Marked: Archived sources show a banner and badge, their configuration is read-only.
- Availability: Enterprise Edition