---
title: Self-discovery analyzers
slug: docs/analyze-self-discovery
docTags: 
createdAt: 2025-06-18T02:31:47.370Z
---

Before TruffleHog Analyze, identifying a key's access often meant manually digging through a SaaS provider's settings page. With TruffleHog Analyze, we use the API to automatically discover a key's metadata, resources, and permissions.

We use self-discovery techniques so that the discovery portion is stateless and minimizes potential impacts. These include the following:

- Inferring scope from headers and API endpoints
- Testing permissions via stateless API calls
- Sending malformed requests to stateful endpoints to observe permission errors

***

:::ExpandableHeading{isOpen="true"}
## Analyze in Enterprise

![Analyze results for an OpenAI secret](https://api.archbee.com/api/optimize/miHT1-xHr9qcbaWswKzkR-Nb-kNP9DnV69FwlUWyySM-20250618-033702.png "Analyze results in TruffleHog enterprise")

If you have TruffleHog Analyze enabled, your scans (both cloud and on-premises) will automatically analyze live secrets on first discovery. There is no additional setup. 

To get started, contact your account executive for more information.
:::

:::ExpandableHeading{isOpen="true"}
## Analyze in Open-Source

We've open-sourced some of our most popular secret types! The [analyzers can be found in our open-source project](https://github.com/trufflesecurity/trufflehog/tree/main/pkg/analyzer/analyzers). 

***

In open-source, if you run `trufflehog analyze` a terminal user interface (TUI) appears. Paste in your live secret and TruffleHog will begin analyzing the secret scope.

![](https://lh7-rt.googleusercontent.com/docsz/AD_4nXe3bFyqcWHa_6usugHOs_sNsTO_NYaf-XpNlw_z0MVJlsMocZeE0BOQiV52NyazkhAfXBQcbqhorANo029GTTadAtPVfctWjPYtJxgXCHYD8idqjE1mN4Lco9C5r79Dd6w-tni1?key=32z2fkkVTAdpqEtdthmvqA "Hugging Face analyzer TUI")

There is an optional `Log file` parameter where you can specify a file that then enumerates all the API calls the analyzer runs. 
:::

![](https://lh7-rt.googleusercontent.com/docsz/AD_4nXfLA_mAtVl7gO0tYGY4KZpkImuK3GYVIrUOBaOpLBOca0QJPDz1eCLPZHl_Xp2SAbLSIJMfr2GsZyz28jchRjlA3gEWcd5RILDRi5-GCbRkQViWpsX6MvP3KJoDLCJwtca1hgSU?key=32z2fkkVTAdpqEtdthmvqA "Example permission output for Hugging Face secret")