GeezerVisonThe World Wide Web, restored to 800 pixels of glory. |
| Home|About|Gaming cabinet|Archives|How it works|Starter sites |
GeezerVison is showing trufflesecurity.com — What is TruffleHog? ◆ Truffle Security Co. ![]() ![]() ![]() TruffleHogTruffleHog™ is a secrets scanning tool that digs deep into your code repositories to find secrets, passwords, and sensitive keys. TruffleHog™ is a secrets scanning tool that digs deep into your code repositories to find secrets, passwords, and sensitive keys. Secrets in unexpected placesSecrets scattered across your SDLC — from Git repos to ticket systems — pose serious risks. A single leak can trigger security breaches, legal trouble, and reputation damage. Millions of secrets, including API keys, passwords, and tokens, are frequently leaking from sources like source code, NPM packages, containers and more, underscoring the need for robust secret leak detection. Secrets scattered across your SDLC — from Git repos to ticket systems — pose serious risks. A single leak can trigger security breaches, legal trouble, and reputation damage. Millions of secrets, including API keys, passwords, and tokens, are frequently leaking from sources like source code, NPM packages, containers and more, underscoring the need for robust secret leak detection. Read our research How TruffleHog worksHow TruffleHog worksDetectScan the version history of all platforms for hidden secrets. TruffleHog scans beyond code repositories to identify secrets hidden in comments, Docker images, and more. AnalyzeTruffleHog Analyze automatically identifies the resources and permissions associated with API key and other secrets without requiring access to a provider’s UI. PreventUse pre-commit and pre-receive hooks so that developers can prevent leaked keys in the first place. Automatically run security scans before commits, and prevent accidental inclusion of sensitive data. RemediateTruffleHog constantly tracks the status of different key types to verify their remediation. You can set up alert reminders on your preferred platform with links to guides on how to rotate and secure keys effectively. Why TruffleHog?Why TruffleHog?Comprehensive multi-branch analysisBy scanning all branches, not just the main or primary branch, TruffleHog™ ensures a consistent level of security across your entire project. This is particularly useful for larger projects with multiple branches being worked on concurrently. Credential verificationFor every potential credential that is detected, we've painstakingly implemented programmatic verification using it's protocol or API. This verification removes false positives. Open-source communityOpen-source software is transparent and available for inspection. Many developers volunteer their time to audit and improve it. This community verifies and checks each other’s work, so there’s never a need to blindly trust one developer. You can check it out yourself! Developer spotlight We are excited to shine the spotlight on Richard Gomez - a dedicated supporter (and truffle hunter) who has made significant contributions to the TruffleHog Community. ![]() ![]() @rgmz Richard Gomez CONTRIBUTIONS 200+ contributions over the last year including TruffleHog, Gitleaks, and 29 other repos WHAT DRIVES YOU? “While my primary motivation is to help projects enhance their security posture, I can’t deny the thrill of discovering secrets — I truly feel like a pig hunting for truffles. Of course, when I run it for my own code or code that I’m reviewing, I’m hoping not to find any secrets!” STAY STRONG DIG DEEP TRUFFLEHOG DOING IT THE RIGHT WAY © 2026 Truffle Security Co. STAY STRONG DIG DEEP TRUFFLEHOG © 2026 Truffle Security Co. |
| You are visitor 01402520 — GeezerVison does not store the pages you look up. Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required. |