All Tools
T
Dev ToolsFreemiumOpen Source
TRUFFLEHOG
Find and verify leaked credentials
AGPL-3.0
ABOUT
Secret scanners dump thousands of matches that may already be revoked. TruffleHog finds credentials in git and cloud sources and verifies whether they still work, so LLM and agent teams rotate real leaks instead of triaging dead keys.
INTEGRATION GUIDE
1. Scan git history for live API keys and cloud credentials
2. Verify whether a leaked OpenAI or AWS key is still active
3. Audit GitHub orgs for secrets before an incident
TAGS
gosecretssecuritygitcredentialsscanning