Topology

overview topology is an interactive graph of your secret exposure it connects the services where secrets were found to the services those secrets grant access to, and marks which of them you are actually scanning use it to trace how far a single leaked credential could travel, prioritize the exposures that reach sensitive systems, and find services you should be scanning but aren't yet how it works topology is built from the verified secrets already in trufflehog enterprise there is no need to configure anything separately for each live secret, topology visualizes the source service where the secret was found, and the target service the secret grants access to it renders each service as a node and each source to target relationship as an edge every service is then placed in one of three groups based on whether trufflehog can scan it and whether it is currently configured every service on the graph falls into one of three categories scanned trufflehog supports scanning this service and it is currently configured not monitored trufflehog supports scanning this service, but it is not configured yet non scannable there is no scanning integration for this service, so it appears only as a target selecting an edge shows the source, the destination, how many secrets connect them, and the secret types involved, with a link to those findings selecting a node shows how many secrets were found there and how many grant access to it when a service is scannable but not monitored, the panel links straight to configuring it you can filter the graph by service category and by triage state notes topology is built from verified (live) secrets only unverified findings do not appear as nodes or edges a service is shown only if it is being scanned, has secrets found in it, or has secrets that grant access to it services with none of these do not appear non scannable services cannot be scanned by trufflehog they are shown as targets so the destination of a leak is still visible, but there is no coverage to configure for them topology is a read only view it does not change secret status, triage state, or any finding the graph reflects your findings at load time changing the triage state filter refreshes the data