Truffle Security

What the company sells

Truffle Security sells TruffleHog, a tool that scans code repositories and other developer and collaboration tools for exposed non-human identities and their secrets, such as API keys, passwords, and tokens, with an enterprise edition adding verification and collaboration features. It is headquartered in San Francisco and is privately held; it raised a $25 million Series B round in November 2025.

Categories

• Secrets detection (primary category)
• Non-human identity security

Headquarters

San Francisco, United States

Founded

Not established from our sources

Ownership

Privately held

Website

trufflesecurity.com

Products and services

• TruffleHog

  Scans source code, hidden content, deleted code, and version history, plus tools such as Slack and Google Cloud, for exposed credentials.

• TruffleHog Analyze

  Identifies the resources and permissions tied to a detected non-human identity or secret without needing access to a provider's own console.

• TruffleHog Enterprise

  Extends TruffleHog's scanning engine with enterprise visibility, verification, and collaboration tools.

Sources

1. Truffle SecurityUndated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
2. Truffle Security via PR NewswirePublished November 6, 2025 · Tier A: the company, a regulator or a filing
3. Truffle SecurityUndated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing

Recorded September 27, 2026 from the sources above. Descriptions are in our own words; we do not rank or recommend vendors, and no vendor pays to be listed or to change what we write. Disclosure: until the publisher confirms it has no business relationship with this company, treat one as possible (how the network works). Spot a factual error? Request a correction.