Startup profile for Truffle Security: latest funding, latest known valuation, total disclosed funding, investors, status, sources, and why the company is interesting. Part of the Venture Capital Tracker startup directory.
Venture Capital Tracker logo
Venture Capital Tracker

Startup profile · funding coverage

Truffle Security funding, valuation and investors

Secrets scanning and non-human identity security — makers of TruffleHog.

Keep track of Truffle Security

Save this profile to your VCT watchlist for a quick return.

View watchlist

Funding, valuation & investors

Answer-first snapshot

Latest funding

Series B

$25M · November 2025

Latest known valuation

Not publicly disclosed

Total disclosed equity funding

$25M

Excludes debt, grants, acquisitions, secondaries, and IPO proceeds.

Current status

private

growth · San Francisco, California, USA

Investors in latest funding

Lead: Intel Capital , Andreessen Horowitz

Sources: latest funding · trufflesecurity.com Last verified: 2026-07-25

Overview

Truffle Security maintains TruffleHog, a leading open-source secrets detection tool, and TruffleHog Enterprise for verified remediation across code, CI/CD, and cloud environments. In November 2025, the company raised a $25M Series B co-led by Intel Capital and Andreessen Horowitz, launching TruffleHog GCP Analyze for Google Cloud service account leak visibility. The company reports doubled revenue in the prior year and 23,000+ GitHub stars on the OSS project.

Why Truffle Security is interesting

TruffleHog's open-source roots (23k GitHub stars) fueled enterprise revenue — Intel Capital and a16z co-led $25M Series B as credential leaks became breach #1 cause.

Product & use cases

TruffleHog scans repositories and cloud environments for leaked secrets and non-human identities (NHIs), verifies live credentials, and prioritizes remediation — enterprise tier adds policy and integrations.

  • Engineering teams preventing credential commits in CI/CD
  • Security teams auditing GCP/AWS/Azure service account exposure
  • Compliance programs requiring secrets scanning in SDLC

Key facts

  • Series B (Nov 2025): $25M co-led by Intel Capital and a16z
  • TruffleHog: 23k+ GitHub stars, 15M downloads
  • Revenue more than doubled in year before Series B
  • Launched TruffleHog GCP Analyze for cloud NHI visibility

Funding history (newest first)

Series B

2025-11 $25M

Source: Read source · trufflesecurity.com

Investors in our directory

Funds linked from Truffle Security's profile — open a fund page for stage focus and related deal articles.

andreessen-horowitz

Competitive landscape

Edge: OSS developer adoption (15M+ downloads) converts to enterprise pipeline — verification engine reduces false positives versus regex-only scanners.

Secrets scanning is table stakes for DevSecOps; TruffleHog competes on verification accuracy and NHI expansion beyond code repos into cloud identity leaks.

  • GitGuardian direct

    Secrets detection for dev teams; similar OSS-to-enterprise motion.

  • Snyk adjacent

    Broader DevSecOps; secrets scanning one module.

  • Native GitHub secret scanning incumbent

    Platform feature; less cross-cloud NHI depth.

Notable stories

  • Truffle Security's Series B coincided with GCP Analyze launch — extending from git leaks to cloud service account exposure, where breaches increasingly start (PR Newswire, Nov 2025).

Industries

cybersecurity developer-tools

Market / IPO context

Editorial / static context — not a live quote.

FAQs about Truffle Security

Practical answers founders, operators, and investors typically search for.

Truffle Security builds TruffleHog — secrets detection and non-human identity security for code and cloud.
Open-source and enterprise tool scanning for leaked API keys, passwords, and cloud credentials.
Intel Capital and Andreessen Horowitz co-led the $25M Series B. See /fund/andreessen-horowitz.
Both scan for secrets; TruffleHog emphasizes verification and NHI/cloud analyze modules.
November 2025 — $25M.
Yes — OSS core with TruffleHog Enterprise for organizations.
Service accounts, API keys, and machine credentials — growing attack surface in cloud environments.
Over $40M total per SecurityWeek coverage at Series B.
Website All startups Funding news

By Venture Capital Tracker

Last updated:

Editorial note: AI tools assisted with research, structure, or drafting. Venture Capital Tracker retains human editorial responsibility for factual accuracy, relevance, and source quality before publication.