CISO Tribune

Vendor comparison · 2 companies

Truffle Security vs Valence

Truffle Security is the company behind TruffleHog, an open-source security project. Valence sells a platform that discovers and protects human, non-human, and AI agent identities across endpoint, cloud, and SaaS. CISO Tribune files both under Non-human identity security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Truffle Security
  • Valence
Truffle Security vs Valence: Products, Customers and Funding Compared
Truffle SecurityTruffle Security is the company behind TruffleHog, an open-source security project.trufflesecurity.comValenceValence sells a platform that discovers and protects human, non-human, and AI agent identities across endpoint, cloud, and SaaS.valencesecurity.com
What it sells
  • TruffleHog[1][4][5][6][7][8][9][10][11]Uncovers exposed non-human identities and their secrets.
  • TruffleHog Analyze[1][5][10]Identifies the resources and permissions associated with NHIs, API keys, and other secrets.
  • TruffleHog Enterprise[1][10][11]Used by Optro and TextNow to detect exposed secrets across source code and collaboration tools.
  • SaaS Identity Threat Detection and Response (ITDR)Monitors identity activity across SaaS to detect threats.
Categories
Headquarters
San Francisco, United States[3]Not stated on its pages
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Privately held[7]Not stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • June 1, 2026Truffle Security says Hugging Face partnered closely with it, and CTO Julien Chaumond contributed native storage-bucket scanning support to TruffleHog.[4]
Not stated on its pages
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 4, 2026[4]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Its customer stories describe organisations that scan source code together with collaboration tools such as Jira, Slack, and Confluence, and one of them works in customer data and marketing automation. TruffleHog can run on isolated servers operated by Truffle Security or on servers the customer runs. TruffleHog also offers on-premise scanners for sources on an internal network.From its own pages, Valence sells mainly to security teams that need to discover, protect, and detect and respond to threats across their SaaS and AI ecosystem. Valence also addresses SaaS admins, who work with security teams on a unified view of SaaS and AI risks. Valence works with business users to understand and address risks they configured. Valence offers a route for organizations that want to develop integrations for proprietary or highly specialized SaaS apps. Valence says its platform helps find and fix risks across mission-critical SaaS applications.
Last verified
September 27, 2026November 2, 2026

Where they overlap

  • Truffle Security and Valence are both filed under Non-human identity security.

Where they differ, field by field

  • Truffle Security's primary category is Secrets detection; Valence's is SaaS security posture.
  • Valence is also filed under Identity threat detection and response.
  • Truffle Security lists TruffleHog, TruffleHog Analyze and TruffleHog Enterprise. Valence lists SaaS Identity Threat Detection and Response (ITDR).
  • Truffle Security is headquartered in San Francisco, United States.
  • Truffle Security is privately held.

What it sells: Truffle Security

What TruffleHog does[1][4][5][6][7][8][9][10][11]
TruffleHog scans hidden content, deleted code, and version history from GitHub, Google Cloud, Slack, and other commonly used tools. TruffleHog looks for secrets in GitHub comments and pull requests. TruffleHog integrates with more than 20 platforms and tools. TruffleHog scans released artifacts for leaked secrets introduced during the build process.
What TruffleHog Analyze does[1][5][10]
TruffleHog Analyze identifies the resources and permissions associated with NHIs, API keys, and other secrets without requiring access to a provider's UI. TruffleHog Analyze works with TruffleHog Enterprise to reveal secret ownership, access scope, and permissions.
What TruffleHog Enterprise does[1][10][11]
Optro chose TruffleHog Enterprise for its detectors and integrations. Optro detects exposed secrets across source code, Jira, Slack, and S3 application logs, and routes findings into its SecOps workflows. Findings from Optro's scans move into Tines for investigation and response. With TruffleHog Enterprise at TextNow, verification helps the team decide which exposures require immediate response.

What it sells: Valence

What SaaS Identity Threat Detection and Response (ITDR) does
Valence delivers identity threat detection and response across a SaaS ecosystem. Valence monitors activity across users, service accounts, tokens, and integrations to identify suspicious access patterns, privilege abuse, and signs of compromise. Valence correlates events across applications to uncover threats that are difficult to detect in isolation.

Questions about Truffle Security and Valence

What do Truffle Security and Valence sell?
Truffle Security sells TruffleHog, TruffleHog Analyze and TruffleHog Enterprise. Valence sells SaaS Identity Threat Detection and Response (ITDR).
Are Truffle Security and Valence in the same category?
They share Non-human identity security. Truffle Security's primary category is Secrets detection and Valence's is SaaS security posture.
Where are Truffle Security and Valence headquartered?
Truffle Security is headquartered in San Francisco, United States.
Who owns Truffle Security and Valence?
Truffle Security is privately held.
Who are Truffle Security and Valence sold to?
Its customer stories describe organisations that scan source code together with collaboration tools such as Jira, Slack, and Confluence, and one of them works in customer data and marketing automation. From its own pages, Valence sells mainly to security teams that need to discover, protect, and detect and respond to threats across their SaaS and AI ecosystem.
What have Truffle Security and Valence announced recently?
June 1, 2026: Truffle Security says Hugging Face partnered closely with it, and CTO Julien Chaumond contributed native storage-bucket scanning support to TruffleHog.

About Truffle Security

Truffle Security is the company behind TruffleHog, an open-source security project. Truffle Security was founded by career security experts. Truffle Security is backed by venture capital firms such as a16z.[6]

Truffle Security says agentic AI is multiplying the non-human identities in an environment, and many of them depend on credentials that can leak. Truffle Security states that non-human identity secrets, including API keys, passwords, and tokens, leak from sources like source code, chat systems, and support tickets. TruffleHog finds, verifies, and helps remediate exposed secrets across code, cloud, and other places where they hide.[1][5][8]

TruffleHog scans hidden content, deleted code, and version history from GitHub, Google Cloud, Slack, and other commonly used tools. TruffleHog looks for secrets in GitHub comments and pull requests. TruffleHog integrates with more than 20 platforms and tools. TruffleHog integrates with Git repositories to scan for secrets before they are committed. TruffleHog scans released artifacts for leaked secrets introduced during the build process. TruffleHog works with continuous integration platforms to scan code during the build process.[1][5][9]

TruffleHog Analyze identifies the resources and permissions associated with NHIs, API keys, and other secrets without requiring access to a provider's UI. TruffleHog Analyze works with TruffleHog Enterprise to reveal secret ownership, access scope, and permissions.[1][5][10]

Optro chose TruffleHog Enterprise for its detectors and integrations. Optro detects exposed secrets across source code, Jira, Slack, and S3 application logs, and routes findings into its SecOps workflows. Findings from Optro's scans move into Tines for investigation and response. TextNow finds exposed secrets across source code, Jira, and Confluence, and confirms they are rotated before closing the incident. With TruffleHog Enterprise at TextNow, verification helps the team decide which exposures require immediate response. Klaviyo is a customer data and marketing automation company.[1][10][11][12][13]

Each customer's installation of TruffleHog is hosted in its own private environment with an isolated database instance, which is encrypted at rest. TruffleHog supports single sign-on through SAML 2.0 or OAuth 2.0 workflows. Every deployment of TruffleHog receives randomly generated and securely stored infrastructure credentials. Scanning for secrets in TruffleHog occurs in memory so that the scanned data is never persisted to storage. Never storing customers' secrets is fundamental to the design of TruffleHog. Truffle Security states that the details of customers' findings are never sent to third parties. TruffleHog can run on isolated servers operated by Truffle Security or on servers the customer runs. With the on-premise scanners, customers can scan sources on their internal network and keep source credentials inside their own infrastructure with a local configuration. Deployments and updates of TruffleHog are automatic.[2][5][6]

Truffle Security on the record

Sources

Truffle Security full record

  1. [1]trufflesecurity.comTruffle Security · trufflesecurity.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Truffle security raises 25 million series b to expand nhi security 302606933Truffle Security via PR Newswire · prnewswire.com · published November 6, 2025 · Tier A
  3. [3]Terms conditionsTruffle Security · trufflesecurity.com · undated page, accessed September 27, 2026 · Tier A
  4. [4]Scanning 7.6 Petabytes of Hugging Face Training Data for SecretsTruffle Security Co. · published June 1, 2026 · Tier A
  5. [5]Truffle Security Co.Truffle Security · undated page, accessed November 10, 2026 · Tier A
  6. [6]About ◆ Truffle Security Co.Truffle Security · undated page, accessed November 10, 2026 · Tier A
  7. [7]Security ◆ Truffle Security Co.Truffle Security · undated page, accessed November 10, 2026 · Tier A
  8. [8]Meet Truffle Security at Black Hat 2026 - Booth 5727Truffle Security · undated page, accessed November 10, 2026 · Tier A
  9. [9]Integrations ◆ Truffle Security Co.Truffle Security · undated page, accessed November 10, 2026 · Tier A
  10. [10]Klaviyo Customer Story ◆ Truffle Security Co.Truffle Security · undated page, accessed November 10, 2026 · Tier A
  11. [11]Optro Customer Story ◆ Truffle Security Co.Truffle Security · undated page, accessed November 10, 2026 · Tier A
  12. [12]Customers ◆ Truffle Security Co.Truffle Security · undated page, accessed November 10, 2026 · Tier A
  13. [13]TextNow Customer Story ◆ Truffle Security Co.Truffle Security · undated page, accessed November 10, 2026 · Tier A

Valence full record

  1. [1]valencesecurity.comValence · valencesecurity.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Israeli cybersecurity startup valence launches out of stealth with 7m in fundingValence · valencesecurity.com · undated page, accessed September 27, 2026 · Tier A
  3. [3]SaaS Application Security Platform | ValenceValence · undated page, accessed October 29, 2026 · Tier A
  4. [4]Valence Reviews 2026: Details, Pricing, & FeaturesG2 · undated page, accessed October 29, 2026 · Tier C
  5. [5]The Leader in SaaS and AI Security, Built for the Agentic Era | ValenceValence Security · undated page, accessed November 4, 2026 · Tier A
  6. [6]Comprehensive Microsoft 365 Security and Risk RemediationValence Security · undated page, accessed November 4, 2026 · Tier A
  7. [7]SaaS Security Posture Management | ValenceValence Security · undated page, accessed November 4, 2026 · Tier A
  8. [8]AI Security Posture Management (AI-SPM)Valence Security · undated page, accessed November 4, 2026 · Tier A
  9. [9]Identity Threat Detection and Response (ITDR) | ValenceValence Security · undated page, accessed November 4, 2026 · Tier A
  10. [10]Valence Connector Studio | Extend SaaS Security to Any ApplicationValence Security · undated page, accessed November 4, 2026 · Tier A
  11. [11]Remediate Your Slack Security Risks | ValenceValence Security · undated page, accessed November 4, 2026 · Tier A
  12. [12]GitHub Security: Manage Risks with ValenceValence Security · undated page, accessed November 4, 2026 · Tier A
  13. [13]Google Workspace Security | Protect Your SaaS EnvironmentValence Security · undated page, accessed November 4, 2026 · Tier A
  14. [14]Salesforce Security | Protect Your SaaS EnvironmentValence Security · undated page, accessed November 4, 2026 · Tier A

Spot a factual error? Request a correction.