Startup profile · funding coverage
Truffle Security funding, valuation and investors
Secrets scanning and non-human identity security — makers of TruffleHog.
Keep track of Truffle Security
Save this profile to your VCT watchlist for a quick return.
Funding, valuation & investors
Answer-first snapshotLatest funding
Series B
$25M · November 2025
Latest known valuation
Not publicly disclosed
Total disclosed equity funding
$25M
Excludes debt, grants, acquisitions, secondaries, and IPO proceeds.
Current status
private
growth · San Francisco, California, USA
Investors in latest funding
Lead: Intel Capital , Andreessen Horowitz
Overview
Truffle Security maintains TruffleHog, a leading open-source secrets detection tool, and TruffleHog Enterprise for verified remediation across code, CI/CD, and cloud environments. In November 2025, the company raised a $25M Series B co-led by Intel Capital and Andreessen Horowitz, launching TruffleHog GCP Analyze for Google Cloud service account leak visibility. The company reports doubled revenue in the prior year and 23,000+ GitHub stars on the OSS project.
Why Truffle Security is interesting
TruffleHog's open-source roots (23k GitHub stars) fueled enterprise revenue — Intel Capital and a16z co-led $25M Series B as credential leaks became breach #1 cause.
Product & use cases
TruffleHog scans repositories and cloud environments for leaked secrets and non-human identities (NHIs), verifies live credentials, and prioritizes remediation — enterprise tier adds policy and integrations.
- Engineering teams preventing credential commits in CI/CD
- Security teams auditing GCP/AWS/Azure service account exposure
- Compliance programs requiring secrets scanning in SDLC
Key facts
- Series B (Nov 2025): $25M co-led by Intel Capital and a16z
- TruffleHog: 23k+ GitHub stars, 15M downloads
- Revenue more than doubled in year before Series B
- Launched TruffleHog GCP Analyze for cloud NHI visibility
Funding history (newest first)
Series B
2025-11 $25M- Intel Capital (lead)
- Andreessen Horowitz (lead)
Investors in our directory
Funds linked from Truffle Security's profile — open a fund page for stage focus and related deal articles.
Competitive landscape
Edge: OSS developer adoption (15M+ downloads) converts to enterprise pipeline — verification engine reduces false positives versus regex-only scanners.
Secrets scanning is table stakes for DevSecOps; TruffleHog competes on verification accuracy and NHI expansion beyond code repos into cloud identity leaks.
-
GitGuardian direct
Secrets detection for dev teams; similar OSS-to-enterprise motion.
-
Snyk adjacent
Broader DevSecOps; secrets scanning one module.
-
Native GitHub secret scanning incumbent
Platform feature; less cross-cloud NHI depth.
Notable stories
- Truffle Security's Series B coincided with GCP Analyze launch — extending from git leaks to cloud service account exposure, where breaches increasingly start (PR Newswire, Nov 2025).
Industries
FAQs about Truffle Security
Practical answers founders, operators, and investors typically search for.
Last updated:
Editorial note: AI tools assisted with research, structure, or drafting. Venture Capital Tracker retains human editorial responsibility for factual accuracy, relevance, and source quality before publication.