Product info

TruffleHog Enterprise overview

Learn how to find, verify, and fix secrets

View

TruffleHog Analyze overview

Learn more about our secret analysis tool

View

TruffleHog GCP Analyze overview

Learn more about our Google Cloud Platform service account key analysis tool

View

TruffleHog Forager overview

An intro to our powerful scanning tool for the public web

View

TruffleHog Open Source & Enterprise Compared

Find out about the differences between TruffleHog OSS and TrufleHog Enterprise

View

Case studies

Klaviyo case study

Klaviyo identifies exposed sensitive keys without drowning in false alerts

View

Gett case study

Gett uses TruffleHog to identify leaked secrets with minimal strain on internal resources.

View

Cmd case study

Cmd has incorporated TruffleHog as part of their developer’s modern tool stack.

View

Ebooks / guides

7 best practices for secrets lifecycle management

Learn the best practices for secrets lifecycle management that security leaders must adopt to secure non-human identities at enterprise scale.

View

Exposed NHIs: The SaaS Worm Already in Your Stack

One exposed API key can silently cascade through your entire SaaS stack. Learn about the 6 critical risks and how to stop them before your team even knows you've been breached.

View

The Kitchen

Recipes to help you make the most of TruffleHog.

infra