TruffleHog
Find and verify leaked credentials across many sources
TruffleHog is an open-source secrets scanner that searches code, files, and many other sources for leaked credentials and verifies whether they are still active. It is run in self-hosted security pipelines.
Key features
- Verified secret detection
- 800+ credential types
- Many data sources
- CI integration
Strengths
- Released under the AGPL-3.0 license
- Easy to set up — beginner-friendly
- First-class Docker support for quick deployment
- Mature project with 27.3k GitHub stars
TruffleHog replaces
Compare TruffleHog
12 head-to-head comparisons.
Similar developer tools & git apps
Excalidraw
Developer Tools & GitVirtual hand-drawn style whiteboard
Replaces Miro
lazygit
Developer Tools & GitSimple terminal UI for Git commands
Replaces GitKraken, Sourcetree
Hoppscotch
Developer Tools & GitOpen-source API development ecosystem
Replaces Postman, Insomnia
json-server
Developer Tools & GitFull fake REST API from a JSON file in seconds
Replaces Mockoon, Postman Mock
Strapi
Developer Tools & GitLeading open-source headless CMS
Replaces Contentful
NocoDB
Developer Tools & GitOpen-source Airtable alternative
Replaces Airtable