Truffle Security Launches TruffleHog AWS Analyze to Reduce Remediation Time on Leaked AWS Credentials TMCnet News [August 24, 2026] | / | Truffle Security Launches TruffleHog AWS Analyze to Reduce Remediation Time on Leaked AWS Credentials Truffle Security, the company that makes it easy to find, verify, and remediate secrets, today announced TruffleHog AWS Analyze, a new addition to TruffleHog Enterprise. TruffleHog AWS Analyze enriches found AWS credentials to highlight permissions and access levels, so a security team can assess the risk and prioritize its response. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260824040923/en/ Its scanners have verified 64,024 unique AWS key pairs across 431,875 public findings. TruffleHog Enterprise already finds and verifies leaked credentials across 800+ secret types, and with TruffleHog Analyze, it can also provide identity and access context, first for SaaS platforms and Google Cloud, and now for AWS. With this addition, teams running multi-cloud environments can identify a leaked secret, understand what it can access, and prioritize remediation across all three surfaces. TruffleHog AWS Analyze shows full context for leaked keys Once an AWS credential leaks, understanding its impact can require manually piecing together identity, permissions, and IAM relationships. TruffleHog AWS Analyze does that investigation for security teams. It identifies the AWS user or role behind the credential, maps its effective permissions, and reveals which roles it can assume to gain additional access, giving responders a clearer picture of the potential blast radius. It also flags when AWS returns incomplete results, so teams know when the analysis provides only a partial view. "Agentic workflos are creating, using, and exposing AWS credentials faster than any team can track. Once a key ends up embedded in an automated process, it is copied and reused well beyond its original purpose, often persisting long after anyone remembers it exists. Identifying a leaked credential is one challenge but understanding what it can actually reach can be difficult to determine. TruffleHog AWS Analyze gives security teams that context as part of the same workflow, so they know exactly what has been exposed and fix it easily," said Dylan Ayrey, CEO and founder of Truffle Security. AWS keys are exposed frequently; fixing them lags behind AWS keys are among the most frequently leaked credentials, and many stay active long after they have been exposed. Because a single AWS key can reach compute, storage, databases, etc., a leak doesn't just expose one system, it exposes the permissions that control every other system. Truffle Security Research recently verified 64,024 unique leaked AWS keys pulled from public code, container images, and datasets, and found that 88% still were active. The median leaked key had been sitting active for five years, and only 14% had ever been rotated. Among the keys researched closely, 84% carried full administrator access, and 1 in 6 was a root key, which provides access to an AWS account. Surprisingly, 929 of these credentials had already been flagged by AWS's own compromised-key quarantine policy, some more than three years earlier and every one still authenticated. Even though AWS had detected the exposure, no one had remediated them. When TruffleHog scanned 7.6 petabytes of public AI training data on Hugging Face, it found the same exposure at scale. 3,343 live AWS keys were still live, more than 900 of which could list S3 buckets holding at least 51.7 TB of private data. "We proactively scan the Hub with TruffleHog and notify publishers by email when we find a verified secret. But an alert is only the beginning. Truffle Security's research is a reminder that a leaked key is vulnerable until someone rotates it. Showing teams the identity and access behind a credential is how you turn a notification into action," said Julien Chaumond, CTO at Hugging Face. If you publish models or datasets on Hugging Face, you will receive an email when a verified secret is detected. Users can check huggingface.co/settings/notifications to confirm those alerts are still on, and rotate rather than delete any key that has been exposed. Combined with TruffleHog Enterprise's ability to find and verify every instance of a leaked key, TruffleHog AWS Analyze adds access context teams need to remediate faster. Get TruffleHog Analyze for AWS TruffleHog AWS Analyze is available now as an add-on to TruffleHog Enterprise. - Read the blog on TruffleHog AWS Analyze - Learn more at TruffleHog AWS Analyze About Truffle Security For more information, reach out to [email protected] View source version on businesswire.com: https://www.businesswire.com/news/home/20260824040923/en/ [ Back To TMCnet.com's Homepage] |

TruffleHog Analyze press release

Truffle Security secures $25M to protect codebases from leaked secrets and nonhuman identities. Open-source security software company Truffle Security Co. announced today that it has raised $25 million in new funding to fuel continued growth of TruffleHog Enterprise, the company's enterprise-grade secrets detection, verification and remediation solution, and expand its development in secrets and nonhuman identities protection. Founded in 2019, Truffle Security provides paid solutions based on TruffleHog, an open-source tool that scans code repositories for exposed secrets such as application programming interface keys, tokens and passwords. the tool helps developers and security teams quickly identify and remediate leaked credentials before they can be exploited. Truffle Security's offering is focused on detecting exposed secrets, such as API keys, tokens, service-account credentials and other nonhuman identities, across codebases, cloud environments and repositories. The open-source engine supports hundreds of detectors and is designed to scan for signs of secret leakage or improper credentials being checked in. The company also offers verification and remediation where, once a secret is found, the platform helps determine whether it is active, what systems it could access and what the blast radius might be. The results give contextual insight that allows security teams and development teams to prioritize and respond quickly. Truffle Security's paid offering, TruffleHog Enterprise, provides monitoring, detection and integration into the software development lifecycle so that secrets don't become entry points for breaches. The Series A round was led by Intel Capital Corp. and a16z (Andreessen Horowitz). Joining the round were Abstract Ventures, Lytical Ventures and individual investors. Those included Casey Ellis, founder of BugCrowd Inc., as well as Emilio Escobar, chief information security officer at Datadog Inc. ,and Haroon Meer, founder and chief executive of Thinkst Applied Research Pty. Ltd. "As AI transforms how software is built, the security surface is expanding just as quickly," said Martin Casado, general partner at Andreessen Horowitz. "Truffle Security is tackling one of the most urgent challenges in this new era, which is protecting codebases from secret exposure at scale." Along with the funding, Truffle Security also announced a new GCP Analyze add-on for TruffleHog Enterprise that is designed to significantly reduce time to remediation when Google Cloud Platform secrets leak. With GCP Analyze, security teams get instant context, including what resources it can access, its inheritance and the blast radius of its permissions, instead of having to spend hours untangling identity and access management complexity. The new offering is built on top of TruffleHog Enterprise's verified secret detection, which eliminates false positives to help security teams remediate threats faster and more confidently across the software development lifecycle. Coming into the new funding round, Truffle Security had previously raised a $14 million Series A round in December 2021, according to data from Tracxn. Image: Truffle Security. A message from John Furrier, co-founder of SiliconANGLE: Support its mission to keep content open and free by engaging with theCUBE community. Join theCUBE's Alumni Trust Network, where technology leaders connect, share intelligence and create opportunities. * 15M+ viewers of theCUBE videos, powering conversations across AI, cloud, cybersecurity and more * 11.4k+ theCUBE alumni - Connect with more than 11,400 tech and business leaders shaping the future through a unique trusted-based network. SiliconANGLE Media is a recognized leader in digital media innovation, uniting breakthrough technology, strategic insights and real-time audience engagement. As the parent company of SiliconANGLE, theCUBE Network, theCUBE Research, CUBE365, theCUBE AI and theCUBE SuperStudios - with flagship locations in Silicon Valley and the New York Stock Exchange - SiliconANGLE Media operates at the intersection of media, technology and AI. Founded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Its new proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of industry conversations.