Find, verify, and analyze leaked credentials
Secrets Patterns DB: The largest open-source Database for detecting secrets, API keys, passwords, tokens, and more.
Private key usage verification
Secret and/or credential patterns used for gf.
Yar is a tool for plunderin' organizations, users and/or repositories.
truffleproc — hunt secrets in process memory (TruffleHog & gdb mashup)
Official TruffleHog Burp Suite Extension. Scan Burp Suite traffic for 800+ different types of secrets (API keys, passwords, SSH keys, etc) using TruffleHog.
An open-source collection of API key rotation tutorials.
Hunt for AI coding artifacts containing secrets.
layerleak the Docker Hub Secret Scanner
convert secret patterns to gf compatible.
A powerful Burp Suite extension that automatically detects JavaScript URLs from HTTP traffic, scans them using TruffleHog for secrets detection, and sends findings to Discord webhooks in real-time.
Automated GitHub secret scanning with smart alerting & monitoring.
Find exposed credentials using GitHub Actions with TruffleHog Enterprise.
Open Source ASPM Platform
AI-Powered Wordlist Generator & Target Recon Tool - Replaces CeWL + CUPP + trufflehog in a single Go binary
Local-first LLM secret scanner — scan ChatGPT, Claude, Cursor & Kimi K3 chat history for leaked API keys, PII & credentials. HTML dashboard + rotation guides.
A secret scanner wrapper to aggregate results across multiple secret scanning tools
To associate your repository with the trufflehog topic, visit your repo's landing page and select "manage topics."