Truffle Security
Verified secret scanning that proves a leaked key still works, then helps you kill it.
Proof of life. Raised $25M Series B led by Intel Capital and a16z, November 2025
About Truffle Security
Truffle Security commercializes TruffleHog, the open-source scanner that actually live-checks credentials instead of dumping regex hits. Enterprise adds org-wide coverage, GCP Analyze for leaked Google Cloud service accounts, and NHI context around those secrets.
Intel Capital and a16z led the Series B. Dylan Ayrey and Dustin Decker founded the company around the OSS project.
Investors
a16zIntel CapitalAbstract Ventures
Work at Truffle Security? Link to this listing
Optional badge for your site or README. It changes nothing about the listing, its order or its review. Other formats and a dark version: press kit.
<a href="https://securitystartups.com/companies/truffle-security"><img src="https://securitystartups.com/badge/listed.svg" alt="Listed on Security Startups" width="184" height="44"></a>