10 alternatives to trufflehog

trufflesecurity/trufflehog — Find, verify, and analyze leaked credentials (28,698 stars, AGPL-3.0, integration, auth, security).

These are the closest projects in the JustClaw-It index that we serve licence-cleared code from, ranked by relevance and by our code-quality score (1–10, the mean over each repo's graded components: completeness, code quality, deployability, reusability, strategic value). JustClaw-It does not serve code from trufflesecurity/trufflehog itself (licence class: network-copyleft), so these alternatives are the licence-cleared route.

The alternatives in detail

• tillson/git-hound
  Fast GitHub recon tool. Scans for leaked secrets across all of GitHub, not just known repos and orgs. Support for GitHub dorks.
  score 6.4/10 · MIT permissive · 1,472 stars · 16 components · search them
• deepfence/secretscanner
  :unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:
  score 7.3/10 · MIT permissive · 3,401 stars · 15 components · search them
• betterleaks/betterleaks
  Find leaked secrets everywhere.
  score 5.0/10 · MIT permissive · 2,333 stars · 470 components · search them
• mongodb/kingfisher
  Detect secrets + live validation. Map blast radius. Revoke fast. Use the CLI or embed in Rust and Python.
  score 5.7/10 · Apache-2.0 permissive · 1,273 stars · 301 components · search them
• cachix/secretspec
  A declarative interface for every secret provider.
  score 5.4/10 · Apache-2.0 permissive · 1,617 stars · 206 components · search them
• gitleaks/gitleaks
  Find secrets with Gitleaks 🔑
  score 5.4/10 · MIT permissive · 30,317 stars · 180 components · search them · alternatives
• mazen160/secrets-patterns-db
  Secrets Patterns DB: The largest open-source Database for detecting secrets, API keys, passwords, tokens, and more.
  score 5.4/10 · CC-BY-SA-4.0 weak-copyleft · 1,622 stars · 9 components · search them
• openbao/openbao
  OpenBao is a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.
  score 4.6/10 · MPL-2.0 weak-copyleft · 8,696 stars · 1,505 components · search them
• jkroepke/helm-secrets
  A helm plugin that help manage secrets with Git workflow and store them anywhere
  score 6.8/10 · Apache-2.0 permissive · 2,035 stars · 18 components · search them
• gitguardian/ggshield
  Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.
  score 5.3/10 · MIT permissive · 2,009 stars · 218 components · search them

Licence data: JustClaw-It's per-repo licence policy. Is trufflehog still maintained? Check it. Licence details: licence checker. Ranking data from 2026-10-27T23:04:12Z.