AllSafe provides an intentionally vulnerable Android app for security testing and practice.
Open source
24 alternativesTrufflehog
TruffleHog Enterprise scans Git repositories and other sources for exposed credentials, then helps teams detect, assess, and remediate secrets.
About Trufflehog
TruffleHog Enterprise scans Git repositories and other sources for exposed non-human identities and secrets such as API keys, passwords, and tokens. It checks source code as well as hidden content, deleted code, version history, comments, and pull requests, with listed sources including GitHub, Google Cloud, and Slack.
It verifies credential types with key providers, identifies associated resources and permissions without requiring provider UI access, and tracks remediation status with alerts and re-verification of fixes. The site also references an open-source version of TruffleHog alongside the Enterprise edition.
Key features
- Scans Git repos for exposed API keys, passwords, and tokens
- Checks hidden content, deleted code, and version history
- Scans GitHub comments and pull requests for secrets
- Verifies 800+ credential types with key providers
- Identifies resources and permissions linked to exposed secrets
- Tracks remediation status and sends alerts with custom messages
Best for: Development and security teams that need to find and remediate exposed credentials in code and related tools.
Good for
- Covers hidden content, deleted code, and version history
- Verifies 800+ credential types with key providers
- Identifies resources and permissions for exposed secrets
Trufflehog at a glance
- Website
- trufflesecurity.com
- Category
- Privacy & Security › Breach & Phishing Checks
- Type
- Website
- Pricing
- Not confirmed. Check the site
- Platforms
- Web
- Open source
- Not stated
- Language
- English
- Last checked
- Oct 5, 2026 · Online when checked
- Listed
- Oct 5, 2026
Trufflehog alternatives
Tools and sites you could use instead, ranked by how closely they match.
This Bitwarden help article explains how to use its username and password generator to create account credentials.
FreePick
24 alternatives
git-hound searches public GitHub repositories for exposed secrets and credentials.
Open sourcePick
24 alternatives
Manage KeePass-compatible password databases with AuthPass, a free app for mobile and desktop systems.
The 2FA Directory lists websites and services that support two-factor authentication, including options such as SMS, email, calls, and security keys.
Free
24 alternatives
GitDorker searches GitHub for exposed secrets using a collection of search patterns.
Popular in Breach & Phishing Checks
Well-known listings from the same topic.
Phish Reportphish.reportPhishStatsphishstats.infoF-Securef-secure.com/en/identity-theft-checkerisitPhishingisitphishing.orgHave I Been Pwned Passwordshaveibeenpwned.com/PasswordsOpenPhishopenphish.com
Is something wrong or out of date?
Tell us and an editor will check it.
Own this website?
Claim this listing
Claim the listing and suggest updates yourself. An editor checks every claim first.