Covered
Reviewed for this sample. Only TruffleHog AWS keys and GitHub PATs.
Compare coverage without calling a gray cell a gap.
A working sample of a detector catalog. Three sources, five credential types, and a filter. AWS keys and GitHub PATs are Covered for TruffleHog. Slack, GitLab, and GCP are Observed because those public detector folders exist. Verification for those three was not fully reviewed. Betterleaks and Kingfisher stay Not evaluated.
- Role
- I built this table and the rule that gray is not a gap.
- Stage
- Prototype. Not a production scanner and not a Truffle Security product.
What this repository runs
- 3 sources, typed into the page
- 5 credential types
- A browser filter
- No parser, database, or refresh job
Notes mention 910 parsed TruffleHog records and 14 enriched. Those rows are not in this table.
Try one example: Read a comparison without inventing a gap
Guided example: Read a comparison without inventing a gap
Public-source sample
Static portfolio sample. A source reference is not a live validation result or a current vendor ranking.
Step 1 of 4
Inspect the source
Start with the public TruffleHog repository and the sample table below. The table records a limited review, not an exhaustive product evaluation.
Built with
Confirmed in the repository that renders this page. Planned tools stay in the case study and are not shown as logos.
02 / The sample
The table you can filter.
Covered, Observed, and Not evaluated are different claims. The scroll on a narrow screen is the table, not the page.
| Source | AWS keys | GitHub PATs | Slack | GitLab | GCP |
|---|---|---|---|---|---|
| TruffleHog | Covered | Covered | Observed | Observed | Observed |
| Betterleaks | Not evaluated | Not evaluated | Not evaluated | Not evaluated | Not evaluated |
| Kingfisher | Not evaluated | Not evaluated | Not evaluated | Not evaluated | Not evaluated |
Independent research — not an official Truffle product. Covered is only AWS keys and GitHub PATs for TruffleHog. Observed means the public detector folder exists. Gray is not a confirmed gap. The 910 and 14 counts are notes, not rows here.
03 / How to read a cell
Gray is not a gap.
Observed
A public TruffleHog detector folder exists. Slack, GitLab, and GCP. Verification was not fully reviewed.
Not evaluated
No review. Betterleaks and Kingfisher, and any type not in this table.
04 / Open-source attribution and original contribution
Independent catalog, credited upstream source.
Detector Coverage Atlas is my independent research and visualization project. Its detector facts are derived from public TruffleHog source code at pinned revisions; the TruffleHog detector engine and its implementations belong to their upstream project and contributors. This portfolio's comparison is a small static sample, not the full Atlas ingestion application.
The upstream TruffleHog v3 repository identifies AGPL-3.0 as its license. Reading and attributing source is different from copying or modifying covered code. A future fork to experiment with Go detectors is planned, not implemented.
05 / Not in this repository
The parser is a note, not a job.
A later version would read public detector files at a pinned commit and leave unreviewed cells gray. That code is not here. This page does not call GitHub, and it does not refresh itself.
Explore related work
- Designed
Truffle Camp
A designed secrets-security learning path with a written module and one synthetic practice question. No course platform or saved progress.
- Professional field system
Competitive Intelligence Engine
Turn competitor research into a source-backed brief and field guidance. Monitoring and automatic updates are designed, not running.
- Designed
Account Intelligence
Watch assigned accounts, separate a business change from a hypothesis, and draft outreach a person still has to send.