The Best Trufflehog Alternatives in 2026

AllSafe provides an intentionally vulnerable Android app for security testing and practice.

This Bitwarden help article explains how to use its username and password generator to create account credentials.

git-hound searches public GitHub repositories for exposed secrets and credentials.

Manage KeePass-compatible password databases with AuthPass, a free app for mobile and desktop systems.

The 2FA Directory lists websites and services that support two-factor authentication, including options such as SMS, email, calls, and security keys.

GitDorker searches GitHub for exposed secrets using a collection of search patterns.

Manage passwords, secrets, and credentials from the command line with gopass and Git or GPG storage.

DNSPerf compares the performance and uptime of enterprise and commercial DNS providers.

Test HTTP security headers such as CSP and HSTS, then review recommendations for improving a site.

Clearstar reviews protocol governance, permissions, contracts, and oracles, then recommends fixes through its qualitative diligence process.

Tailscale provides identity-based Zero Trust connectivity for developers, IT, and security teams across resources and environments.

Store, generate, and organize one-time password codes with 2FAuth, a self-hosted manager for individuals and teams.

This page warns users about counterfeit ReVanced sites and helps them identify official sources to avoid scams.

Threat Radar displays current cyber threat intelligence on a live map, showing security activity from its data sources.

Cyberthreat Real-Time Map displays a map and statistics about cyber attacks using data from listed sources.

Snyk helps software teams identify and manage security risks in code and dependencies while building AI-enabled applications.

Shodan indexes internet-connected devices and services, with search tools for examining exposed infrastructure.

Test a browser for privacy leaks, including exposed IP addresses, device information, and fingerprinting risks.

Read a report about GShade adding a computer reboot action after detecting a third-party updater, which its developer called anti-tamper behavior.

Wazuh monitors systems and detects threats through an open source security platform for organizations.

Browse WireGuard source repositories, quick-start documentation, and related project resources.

Canary Tokens creates decoy files and links that alert users when someone accesses them, helping detect unauthorized activity.

OpenBuckets searches cloud storage systems for publicly exposed buckets and lets users filter results by file type.

Superagent provides an autonomous security platform for testing applications, repositories, agents, and infrastructure.