# Truffle Security Co.

> Truffle Security is the company behind TruffleHog, an open-source secret scanner that finds exposed API keys, passwords, tokens and other machine credentials, verifies whether they still work, and helps teams understand and close the resulting risk. Its open-core model pairs a free scanning engine with paid enterprise monitoring, governance, analysis and public-web discovery for AppSec, DevSecOps and security teams.

- **Founded:** 2021
- **Headquarters:** San Francisco, United States
- **Founders:** Dylan Ayrey (CEO and co-founder), Dustin Decker (Co-founder), Julian Dunning (Co-founder)
- **Team size:** Approximately 62 people were associated with the company on LinkedIn in 2026, while LinkedIn's published company-size band was 11-50 employees.
- **Products:** TruffleHog Open Source, TruffleHog Enterprise, TruffleHog Analyze, TruffleHog Forager, TruffleHog GCP Analyze
- **Notable:** TruffleHog grew to more than 26,000 GitHub stars by 2026., The company reported more than 15 million open-source downloads and 250,000 daily runs in November 2025., The detection engine supports more than 800 credential types and more than 20 enterprise integrations.

## Products & services

- **TruffleHog Open Source** — Free, open-source command-line engine that finds, verifies and analyzes leaked credentials across Git repositories, filesystems, cloud storage, Docker images and other sources.
- **TruffleHog Enterprise** — Paid continuous secret-scanning and governance platform with centralized visibility, workflow integrations, SSO, role-based access, analytics and cloud or on-premises deployment.
- **TruffleHog Analyze** — Enterprise add-on that adds ownership, permissions, accessible-resource and blast-radius context to verified SaaS credentials.
- **TruffleHog Forager** — Public-ecosystem monitoring that searches GitHub pushes, npm packages and other public sources for live credentials attributable to an organization.
- **TruffleHog GCP Analyze** — Enterprise add-on that maps leaked Google Cloud service-account keys to resources, inherited permissions and potential blast radius.
- **TruffleHog AWS Analyze** — Enterprise add-on that resolves the IAM principal behind a leaked AWS key and gathers identity policies and potential role paths in one view.

## Achievements

- TruffleHog grew to more than 26,000 GitHub stars by 2026.
- The company reported more than 15 million open-source downloads and 250,000 daily runs in November 2025.
- The detection engine supports more than 800 credential types and more than 20 enterprise integrations.
- Klaviyo reported remediating more than 200 high-impact secrets with TruffleHog Enterprise.
- Truffle Security brought the creators or stewards of TruffleHog, Gitleaks and Nosey Parker onto one team.
- The company raised a $25 million Series B in 2025, bringing total disclosed funding to more than $40 million.
- A 2026 Truffle Security study re-verified 10,616 leaked AWS key pairs and found 88% still authenticated.

## Latest updates

- **2026-08** — Launched TruffleHog AWS Analyze, an Enterprise add-on that resolves AWS IAM identity, attached policies and potential role paths for leaked keys.
- **2026-08** — Published research on 64,024 verified AWS keys; in a re-checkable subset, 88% still authenticated and 768 business-linked keys had full account control.
- **2026-07** — Added Topology, secure Shared Secrets links and multi-organization GitHub App scanning to TruffleHog Enterprise.
- **2025-12** — Added liveness detection for public-key-signed JWTs; the company said the detector found hundreds of live JWTs within hours.
- **2025-11** — Raised a $25 million Series B and introduced GCP Analyze, with plans to expand impact analysis across AWS and Azure.
- **2025-10** — Patched CVE-2025-41390 after a Cisco Talos disclosure involving specially prepared local Git repositories.

## Links

- Website: https://trufflesecurity.com
- LinkedIn: https://www.linkedin.com/company/trufflesecurity
- Twitter/X: https://twitter.com/trufflesec
- GitHub: https://github.com/trufflesecurity
- YouTube: https://www.youtube.com/c/TruffleSecurity

---

Profile page: https://yespress.io/truffle-security-co
Published by YesPress — https://yespress.io
Last updated: 2026-08-22