Truffle Security Raises $25 Million for Secret Scanning Engine

According to SecurityWeek, Truffle Security today announced raising $25 million in a Series B funding round that brings the total raised by the company to over $40 million. The investment round was led by Intel Capital and a16z, with additional support from Abstract, Lytical Ventures, and several angel investors.

Founded in 2021, San Francisco-based Truffle Security is known for TruffleHog, an open source secret scanning solution that helps organisations identify and address leaked secrets across their entire environment. The platform searches for API keys, passwords, tokens, and similar secrets and non-human identities that are leaked through chat systems, support tickets, source code repositories, and other means.

The new funding will be invested in TruffleHog Enterprise, an enterprise-grade secrets detection, verification, and remediation solution, and in the launch of TruffleHog GCP Analyze, an add-on offering visibility into leaked Google Cloud service accounts. The add-on is meant to reduce remediation time when Google Cloud secrets are exposed, by enabling security teams to quickly assess impact, prioritise and remediate the riskiest secrets, and reduce mean time to response.