---
title: Analyze secrets
slug: docs/analyzers
icon: 🔍
docTags: 
createdAt: 2025-06-18T02:28:30.254Z
---

**Exposed secrets aren’t just a code security issue — they’re an IAM risk.**
When a secret leaks, the key questions include: *Is the key live? Who owns it? What does the key have access to?*

TruffleHog Analyze evaluates access patterns to identify a secret’s metadata, permissions, and resources.

Learn why [TruffleHog Analyze is a game-changer for security teams](https://trufflesecurity.com/blog/why-trufflehog-analyze-is-a-game-changer-for-security-teams). 

***

To get started with TruffleHog Analyze:

- In open-source: Run `trufflehog analyze`
- In enterprise: Contact your account executive

***

There are 2 types of TruffleHog Analyzers:

1. [Self-discovery analyzers](docId\:fqh3Lx3kRhyPTPGHhH3ed): These analyzers perform non-state-changing API calls to determine resources and permissions of a particular key. 
   - To see our supported analyzers, visit [trufflesecurity.com/analyzers](https://trufflesecurity.com/analyzers)
2. **Cloud analyze**: These analyzers examine cloud secrets by connecting to your cloud environments to determine a secrets IAM posture. This is an enterprise-only feature.
   - [GCP analyze](docId\:puURCaLSdb2x8f7QComu8) is currently supported.