Skip to content
aicoolies logo
TruffleHog logo

TruffleHog Pricing

freemiumopen source · AGPL-3.0last verified September 6, 2026official site ↗

At a glance

Open-source CLI is 100% free under AGPL-3.0 with 800+ secret detectors, multi-source scanning (Git, S3, Docker, filesystems), and live credential verification for $0. TruffleHog Enterprise provides custom quote-based pricing for continuous multi-source monitoring across 20+ platforms (Jira, Confluence, Slack, Google Drive, GitHub/GitLab orgs), centralized web dashboard, automated remediation workflows, credential permission analysis, SAML SSO, RBAC, and dedicated enterprise support.

Self-hosting cost

TruffleHog is open source under the AGPL-3.0 license. Self-hosting does not add a software license fee, but you still pay for infrastructure, operations, and any external model or API usage. Any hosted, managed, or API plans remain separately priced.

Free & cheaper AI Security & DevSecOps

same category, free plan or open-source license

OpenLITopen source100% free and open source under the Apache-2.0 license ($0 self-hosted on Docker and Kubernetes). Features OpenTelemetry-native LLM tracing, GPU hardware metrics (NVIDIA/AMD/Intel), Prompt Hub, and security guardrails. Managed OpenLIT Cloud edition is available for hosted enterprise deployments.Ciliumopen sourceFree and 100% open source under the Apache-2.0 license (with dual GPL-2.0/BSD-2-Clause BPF datapath templates) as a CNCF Graduated project. Cilium has no software licensing fees for self-hosted or cloud Kubernetes deployments (including GKE Dataplane V2 and Azure CNI Powered by Cilium); organizations pay only for their compute infrastructure. For mission-critical enterprise environments, Isovalent Enterprise for Cilium (by Cisco) provides quote-based annual subscriptions (per-node/environment) with 24/7 SLA support, hardened LTS builds, Customer Testing Environments (CuTEs), enterprise BGP/EVPN, and advanced multi-cluster security and observability retention.MCP-Scanopen source100% free and open-source Model Context Protocol (MCP) security auditing and vulnerability scanner developed by Invariant Labs (Apache-2.0 License). Analyzes MCP client configurations, tool schemas, and server definitions to detect prompt injection vectors, malicious tool poisoning, cross-server shadowing, and unintended permission escalation at zero software cost.PangolinFree Community Edition under AGPL-3.0; Enterprise Edition (FCL) is free for homelabbers/individuals and orgs with <$100K gross annual revenue, paid license required for >=$100K revenue.
TruffleHog overview →alternatives →review: 86/100 →

FAQ

How much does TruffleHog cost?

Open-source CLI is 100% free under AGPL-3.0 with 800+ secret detectors, multi-source scanning (Git, S3, Docker, filesystems), and live credential verification for $0. TruffleHog Enterprise provides custom quote-based pricing for continuous multi-source monitoring across 20+ platforms (Jira, Confluence, Slack, Google Drive, GitHub/GitLab orgs), centralized web dashboard, automated remediation workflows, credential permission analysis, SAML SSO, RBAC, and dedicated enterprise support.

Does TruffleHog have a free plan?

Yes — TruffleHog has a free plan alongside its paid tiers.

Can you self-host TruffleHog for free?

TruffleHog is open source under the AGPL-3.0 license. Self-hosting does not add a software license fee, but you still pay for infrastructure, operations, and any external model or API usage. Any hosted, managed, or API plans remain separately priced.

What are free or cheaper TruffleHog alternatives?

OpenLIT, Cilium, MCP-Scan are in the same category with a free plan or open-source license.

pricing is editorial catalog data (last verified September 6, 2026) — vendors change plans; confirm on the official site before you buy. Reuse this data under CC-BY 4.0 via /data.