Trufflesecurity
trufflesecurity.com
Actively hiring
Information Security
As featured in
Claim pageClaim
Follow
Overview
News
Technologies
Salaries
Products
People
Growth
Offices
Financials
Funding and backers
Team
29
US Form 5500 (plan participants) · Dec 2024
Hiring now
1
open roles
Backers
4
Expa, Andreessen Horowitz
Momentum
30/100
in the news, rising traction
Last sign of life
this month
a posting or a news item
The story so fareach stage dated by its source: the company's releases, the press, registers, filings
Feb 25
On the Hacker News front page Google API keys weren't secrets, but then Gemini changed the rules · 1291 points
Feb 21, 2025
On the Hacker News front page I found a backdoor into my bed · 980 points
Jul 24, 2024
On the Hacker News front page Anyone can access deleted and private repository data on GitHub · 1983 points
Dec 21, 2023
On the Hacker News front page Google OAuth is broken (sort of) · 350 points
Jul 21, 2023
Launched on Hacker News Show HN: Forager – Browse millions of live secrets leaked from GitHub/NPM
2019
Founded
Tractionpublic signals, read monthly
Backed byfrom the funds' portfolios and accelerator catalogs
Expa 
Andreessen Horowitz 
Abstract 
Harpoon Ventures Investors in similar startupsfunds that back the companies most like this one
backs Brightlines
backs Corridor
Similar startupsby what they do, their industry and backers
NetSPI is the proactive security solution used to discover, prioritize, and remediate security vulnerabilities of the highest importance…
TOPHAT|SECURITY provides enterprise-grade cybersecurity solutions and services to protect your business from today.
Obiguard is a complete cybersecurity solution for the AI era, built using AI to detect, explain, and remediate risk. Governance AI…
Protect all your devices online. Keep your personal and business data safe from phishing, malware, and identity theft. Get your free…
Corridor secures code written by AI assistants at the moment it is generated. It reviews agent output for injection flaws, secrets and…
Protect critical infrastructure with cybersecurity built for OT. iolite delivers modern, operator-friendly security that’s dynamic…
News
768 Leaked Corporate AWS Keys Held Full Admin Rights Truffle Security Co.
We re-verified 10,616 leaked AWS keys that surfaced publicly between August 2022 and August 2026. 88% still authenticate, and 768 of the live ones give full control of a company AWS account. The median leaked key is five years old and has never been rotat
Read more
Report
Scanning 7.6 Petabytes of Hugging Face Training Data for Secrets Truffle Security Co.
We scanned every public dataset on Hugging Face for live secrets: 7.6 petabytes across 187 million files. We found 221,303 working credentials, including tokens that can push code into software millions of people install.
Read more
Report
Thousands of Live Secrets Found Across Four Cloud Development Environments Truffle Security Co.
I scanned 22 million public Cloud Development Environment projects across CodeSandbox, StackBlitz, CodePen, and JSFiddle with TruffleHog, found 8,792 verified, unique secrets, and made over $20,000 in bounties along the way. The most impactful finding was
Read more
Report
Truffle Security Co.
TruffleHog is an open-source secret scanning engine that detects and helps resolve secrets across your entire tech stack. Learn more...
Read more
Report
Google API Keys Weren
Google spent over a decade telling developers that Google API keys (like those used in Maps, Firebase, etc.) are not secrets. But that
Read more
Report
TruffleHog now detects JWTs with public-key signatures and verifies them for liveness Truffle Security Co.
TruffleHog now detects JWTs signed with public-key cryptography and verifies them for liveness. This new detector has already found hundreds of live JWTs for our customers.
Read more
Report
Scanning 5.6 million public GitLab repositories for secrets Truffle Security Co.
I scanned every public GitLab Cloud repository (5.6 million) with TruffleHog, found over 17,000 verified live secrets, and earned over $9,000 in bounties along the way.
Read more
Report
Axios Truffle Security raises 25M for enterprise credential protection Truffle Security, which helps enterprises keep track of credentials, locked up a 25 million Series B led by Intel Capital and a16z.
Truffle Security discovered that old Google API keys, previously used in other projects as harmless identifiers, can turn into a serious risk after the Gemini API is enabled.
Read more
Report
How to Scan Force Pushed Commits for Secrets Truffle Security Co.
The new Force Push Scanner tool scans for secrets in dangling commits on GitHub that remain exposed after certain force push operations.
Read more
Report
Guest Post: GCP CloudQuarry: Searching for Secrets in Public GCP Images Truffle Security Co.
We scanned 8,400+ public GCP images and did not find a single exposed secret! That's a dramatic reversal compared to the hundreds we found in AWS AMIs and dozens in Azure Public images. GCP's curated, tightly- controlled image marketplace has seemingly el
Read more
Report
Show more news
Tech stack
Technologies named in job postings at Trufflesecurity over the last 12 months, by layer, with the share of postings for each.
Technologies in use
2
Postings analysed
1
Stack modernity
85/100
Languages
SQL
Cloud & platforms
OpenAI
Sign in to see how your skills match this stack
Sign In
Growth
Hiring Momentum
28/100
Slowing
Open positions
1
0 opened / 0 closed in 30 days
ATS activity
Every ~4 hours
Today
Hiring Dynamics
0%
Hiring Focus
The percentage next to each role is its share of the company's job openings over the last 90 days; the arrow shows the shift versus the previous period.
Sales
100% ▼
Offices
Where the company hires and what each office is for
Cities
1
Hiring now
0
Countries
1
San Francisco
United States
HQ
10-50 est. staff