Truffle Security announced a $25 million Series B on November 6, 2025, to expand TruffleHog, its secrets-detection and non-human identity security product. Intel Capital and Andreessen Horowitz (a16z) led the round. The company said it would invest in product development, customer success and go-to-market, including broader analysis of cloud identities.
What the funding announcement says
Truffle Security said the $25 million round also included Abstract, Lytical Ventures, and security leaders Casey Ellis, founder of BugCrowd; Emilio Escobar, CISO of Datadog; and Haroon Meer, founder and CEO of Thinkst. The company described the financing as a Series B.
The company said it would use the funding to grow TruffleHog Enterprise, support customers and go-to-market efforts, and develop its products. It also named plans to extend non-human identity (NHI) analysis beyond Google Cloud to Amazon Web Services (AWS) and Microsoft Azure. Those were announced plans; the funding announcement does not establish that the capabilities have since shipped.
Truffle Security reported that revenue more than doubled in the year before its November 6, 2025 announcement, but did not provide a revenue baseline. The same announcement cited more than 23,000 GitHub stars, 15 million downloads, and over 250,000 daily runs worldwide. These are company-reported figures as of that announcement, not audited financial results or current 2026 metrics.
#1 Best Overall
What TruffleHog does
TruffleHog is an open-source secrets-scanning project and the foundation for TruffleHog Enterprise, the company’s commercial product. In this context, a “secret” is a credential such as an API key, password, or token that could grant access to a system or service. A non-human identity is a machine or service account rather than a person’s account.
Truffle Security’s current website says its software searches sources including code, chat, and support systems. The company also says it can scan hidden content, deleted code, and version history; verify more than 800 credential types with providers; and analyze related resources and permissions. These are vendor descriptions, not independent performance findings.
What GCP Analyze adds
Truffle Security introduced TruffleHog GCP Analyze as an add-on for TruffleHog Enterprise. The company says it provides context about leaked Google Cloud service accounts, including which resources they can access, how permissions are inherited, and the potential blast radius if a credential is exposed. That context is intended to help security teams assess risk and prioritize remediation. The announcement describes the product’s intended function; it is not an independent test of its effectiveness.
Why the company says it raised the round
The financing connects the company’s open-source project to its enterprise strategy: finding exposed credentials, determining what access they may provide, and helping organizations respond. Truffle Security’s stated expansion from Google Cloud to AWS and Azure would broaden the identity analysis it offers, but the announcement alone does not confirm delivery dates or availability.
Rank #3
Andreessen Horowitz General Partner Martin Casado said, “Truffle Security is tackling one of the most urgent challenges in this new era, which is protecting codebases from secret exposure at scale.” That is an investor’s view of the company’s opportunity, not an independent evaluation of product performance.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What the $25 million does—and does not—tell customers
The announced round signals investor backing and gives the company capital to pursue the product and business priorities it named. It does not, by itself, establish TruffleHog’s detection accuracy, customer outcomes, security effectiveness, or the delivery status of planned integrations. Organizations evaluating the software would still need to assess its supported sources, verification methods, permission analysis, remediation workflow, deployment options, and pricing against their own requirements.
Quick Recap
Best Value
Sources
- Truffle Security’s November 6, 2025 funding announcement
- Truffle Security’s company website
- SecurityWeek’s November 6, 2025 coverage
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
