TruffleHog Enterprise can run with cloud hosted or on premises scanners. Wherever the scanners run is where the scanning and verification happens. Your secrets are never sent to us.

Every Enterprise customer runs an isolated software stack backed by an isolated database.

Dynamic Role-Based Access Control (RBAC)

Architecture

source

Compliance

TruffleHog Docs

Choose your adventure

Creating a scanner

Configuration file reference

Configuring a scanner

Resource Requirements

Secrets management

Running the scanner

Terminology

Getting started

Artifactory

AWS S3

Azure Repos (cloud)

Bitbucket

Buildkite

CircleCI

Confluence

Docker

Filesystem

Gerrit

GitLab

GitHub

Google Cloud Storage (GCS)

Google Drive

Jenkins

Jira

Microsoft Sharepoint

Microsoft Teams

Postman

Slack

Vector

Scan data for secrets

Self-discovery analyzers

GCP analyze

Analyze secrets

Email

Splunk

Stdout

Webhook

Notify results

Shared Secrets

Reverify secrets

Verification caching

Scanning in CI

Pre-commit hooks

Pre-receive hooks

Block secrets from leaking

Systemd

Helm Chart

Kubernetes manifest

Deployment

Custom detectors

Customizing detection

On-premise verification

Customizing detectors

Customizing TruffleHog

Data flow

How we handle your data

Authentication

Security and Compliance

2025 July

2025 June

2025 May

TruffleHog Release Notes