CISO Tribune

Vendor comparison · 2 companies

NewCore vs Truffle Security

NewCore sells an identity platform for governing access by AI agents, with Discover, Secure and Govern capabilities and an option that also manages people. Truffle Security is the company behind TruffleHog, an open-source security project. CISO Tribune files both under Non-human identity security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • NewCore
  • Truffle Security
NewCore vs Truffle Security: Products, Customers and Funding Compared
NewCoreNewCore sells an identity platform for governing access by AI agents, with Discover, Secure and Govern capabilities and an option that also manages people.newcore.ioTruffle SecurityTruffle Security is the company behind TruffleHog, an open-source security project.trufflesecurity.com
What it sells
  • Discover[1][2]Maps people and AI agents into one identity graph across identity vendors, showing every agent, its owner and what it can reach.
  • Secure[1][2]Issues short-lived, task-scoped access for agents bounded by the permissions of the person the agent acts for, removing standing credentials.
  • Govern[1][2]Checks every agent action against a policy engine that can allow, ask or deny, letting access be revoked from one place with ownership recorded.
  • Identity Foundation[1][2]Combines human and agent identity management under shared policies, including phishing-resistant sign-in and a Secure Split Key capability.
  • TruffleHog[1][4][5][6][7][8][9][10][11]Uncovers exposed non-human identities and their secrets.
  • TruffleHog Analyze[1][5][10]Identifies the resources and permissions associated with NHIs, API keys, and other secrets.
  • TruffleHog Enterprise[1][10][11]Used by Optro and TextNow to detect exposed secrets across source code and collaboration tools.
Categories
Headquarters
Not stated on its pagesSan Francisco, United States[3]
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Not stated on its pagesPrivately held[7]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pages
  • June 1, 2026Truffle Security says Hugging Face partnered closely with it, and CTO Julien Chaumond contributed native storage-bucket scanning support to TruffleHog.[4]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Not written yetIts customer stories describe organisations that scan source code together with collaboration tools such as Jira, Slack, and Confluence, and one of them works in customer data and marketing automation. TruffleHog can run on isolated servers operated by Truffle Security or on servers the customer runs. TruffleHog also offers on-premise scanners for sources on an internal network.
Last verified
October 29, 2026September 27, 2026

Where they overlap

  • NewCore and Truffle Security are both filed under Non-human identity security.

Where they differ, field by field

  • NewCore's primary category is Non-human identity security; Truffle Security's is Secrets detection.
  • NewCore is also filed under Workforce IAM and SSO.
  • NewCore lists Discover, Secure, Govern and Identity Foundation. Truffle Security lists TruffleHog, TruffleHog Analyze and TruffleHog Enterprise.
  • Truffle Security is headquartered in San Francisco, United States.
  • Truffle Security is privately held.

What it sells: Truffle Security

What TruffleHog does[1][4][5][6][7][8][9][10][11]
TruffleHog scans hidden content, deleted code, and version history from GitHub, Google Cloud, Slack, and other commonly used tools. TruffleHog looks for secrets in GitHub comments and pull requests. TruffleHog integrates with more than 20 platforms and tools. TruffleHog scans released artifacts for leaked secrets introduced during the build process.
What TruffleHog Analyze does[1][5][10]
TruffleHog Analyze identifies the resources and permissions associated with NHIs, API keys, and other secrets without requiring access to a provider's UI. TruffleHog Analyze works with TruffleHog Enterprise to reveal secret ownership, access scope, and permissions.
What TruffleHog Enterprise does[1][10][11]
Optro chose TruffleHog Enterprise for its detectors and integrations. Optro detects exposed secrets across source code, Jira, Slack, and S3 application logs, and routes findings into its SecOps workflows. Findings from Optro's scans move into Tines for investigation and response. With TruffleHog Enterprise at TextNow, verification helps the team decide which exposures require immediate response.

Questions about NewCore and Truffle Security

What do NewCore and Truffle Security sell?
NewCore sells Discover, Secure, Govern and Identity Foundation. Truffle Security sells TruffleHog, TruffleHog Analyze and TruffleHog Enterprise.
Are NewCore and Truffle Security in the same category?
They share Non-human identity security. NewCore's primary category is Non-human identity security and Truffle Security's is Secrets detection.
Where are NewCore and Truffle Security headquartered?
Truffle Security is headquartered in San Francisco, United States.
Who owns NewCore and Truffle Security?
Truffle Security is privately held.
Who are NewCore and Truffle Security sold to?
Its customer stories describe organisations that scan source code together with collaboration tools such as Jira, Slack, and Confluence, and one of them works in customer data and marketing automation.
What have NewCore and Truffle Security announced recently?
June 1, 2026: Truffle Security says Hugging Face partnered closely with it, and CTO Julien Chaumond contributed native storage-bucket scanning support to TruffleHog.

About NewCore

NewCore sells an identity platform for governing access by AI agents, with Discover, Secure and Govern capabilities and an option that also manages people.

NewCore describes the problem this way: identity was built for people who sign in, and a blended workforce of people and AI agents now acts across the business, with no clear ownership of what those agents do. The company says most teams still cannot answer three questions: where the AI agents are, what they can connect to and how, and how to control what they do.[2]

For the first question, NewCore says it maps people and AI agents in one identity graph across every identity vendor a customer runs. The stated aim is to find every agent, who owns it and what it can reach.[1][2]

For the second question, NewCore describes short-lived, task-scoped access, bounded by the permissions of the person the agent acts for. NewCore states that agents hold no standing credentials.[1][2]

For the third question, NewCore says every agent action is checked against one policy engine that returns allow, ask or deny. Access can be revoked from one place, and every decision is tied to an owner.[1][2]

NewCore describes a unified identity plane in which humans and AI agents authenticate, get authorized, are secured and are governed as they reach enterprise apps and systems. Every action is recorded in an audit trail. NewCore says every approved request receives just-in-time, per-action access.[2]

NewCore offers two ways to start. In the first, customers discover, secure and govern their AI agents while the current identity platform keeps handling employee sign-in. That route begins with a read-only connection, and NewCore says nothing has to be migrated. In the second, customers upgrade to one identity platform that manages people and agents together with shared policies and clear ownership. That option includes phishing-resistant sign-in and Secure Split Key for people.[1][2]

NewCore on the record

Sources

NewCore full record

  1. [1]newcore.ioNewCore · newcore.io · undated page, accessed October 29, 2026 · Tier A
  2. [2]The Agentic Identity Company | NewCoreNewCore · undated page, accessed November 5, 2026 · Tier A

Truffle Security full record

  1. [1]trufflesecurity.comTruffle Security · trufflesecurity.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Truffle security raises 25 million series b to expand nhi security 302606933Truffle Security via PR Newswire · prnewswire.com · published November 6, 2025 · Tier A
  3. [3]Terms conditionsTruffle Security · trufflesecurity.com · undated page, accessed September 27, 2026 · Tier A
  4. [4]Scanning 7.6 Petabytes of Hugging Face Training Data for SecretsTruffle Security Co. · published June 1, 2026 · Tier A
  5. [5]Truffle Security Co.Truffle Security · undated page, accessed November 10, 2026 · Tier A
  6. [6]About ◆ Truffle Security Co.Truffle Security · undated page, accessed November 10, 2026 · Tier A
  7. [7]Security ◆ Truffle Security Co.Truffle Security · undated page, accessed November 10, 2026 · Tier A
  8. [8]Meet Truffle Security at Black Hat 2026 - Booth 5727Truffle Security · undated page, accessed November 10, 2026 · Tier A
  9. [9]Integrations ◆ Truffle Security Co.Truffle Security · undated page, accessed November 10, 2026 · Tier A
  10. [10]Klaviyo Customer Story ◆ Truffle Security Co.Truffle Security · undated page, accessed November 10, 2026 · Tier A
  11. [11]Optro Customer Story ◆ Truffle Security Co.Truffle Security · undated page, accessed November 10, 2026 · Tier A
  12. [12]Customers ◆ Truffle Security Co.Truffle Security · undated page, accessed November 10, 2026 · Tier A
  13. [13]TextNow Customer Story ◆ Truffle Security Co.Truffle Security · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.