TruffleHog by Truffle Security Co. is an open-source secret scanning engine designed to detect and resolve exposed secrets across an organization's tech stack. It scans for sensitive credentials beyond source code, including hidden content, deleted code, and version history from commonly used tools. TruffleHog can detect secrets in GitHub comments and pull requests, and supports over 800 credential types. The tool is capable of scanning various platforms including source code repositories, chat systems, wikis, ticketing systems, and more.
