What Trufflehog is
Trufflehog is the best open source secrets scanner available, and easily integrates as a GitHub action. The vendor site is trufflesecurity.com. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Trufflehog covers
Trufflehog is in the catalog for these capabilities. Categories: Secret Scanning. Catalog tags: Hands-on, Nerdy, and Open Source.
How to evaluate Trufflehog in a security program
Use Trufflehog as a stack candidate, not as diligence evidence. The oneNorma score for Trufflehog is 6.3/10 (percentile 89). If the real gap is in Secret Scanning, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what trufflesecurity.com publishes. Contrast it with pentesting and Security Cloud & Compliance.