Source: https://seerepo.com/compare/hashicorp/vault/vs/trufflesecurity/trufflehog
Markdown source: https://seerepo.com/compare/hashicorp/vault/vs/trufflesecurity/trufflehog.md
Description: vault and trufflehog share 15 technologies: MongoDB, MySQL, pgx, s3, github.com/hashicorp/golang-lru/v2, github.com/patrickmn/go-cache, Google, github.com/aws/aws-sdk-go-v2/credentials, golang.org/x/oauth2, github.com/golang-jwt/jwt/v5, github.com/aws/aws-sdk-go-v2, github.com/aws/aws-sdk-go-v2/service/sts, github.com/moby/moby/client, github.com/aws/aws-sdk-go-v2/config, and Prometheus. Both are written in Go.

# vault vs trufflehog

vault and trufflehog share 15 technologies: MongoDB, MySQL, pgx, s3, github.com/hashicorp/golang-lru/v2, github.com/patrickmn/go-cache, Google, github.com/aws/aws-sdk-go-v2/credentials, golang.org/x/oauth2, github.com/golang-jwt/jwt/v5, github.com/aws/aws-sdk-go-v2, github.com/aws/aws-sdk-go-v2/service/sts, github.com/moby/moby/client, github.com/aws/aws-sdk-go-v2/config, and Prometheus. Both are written in Go.

- [hashicorp/vault](https://seerepo.com/r/hashicorp/vault): A tool for secrets management, encryption as a service, and privileged access management
- [trufflesecurity/trufflehog](https://seerepo.com/r/trufflesecurity/trufflehog): Find, verify, and analyze leaked credentials

## What they share and what sets them apart

- In common: MongoDB, MySQL, pgx, s3, github.com/hashicorp/golang-lru/v2, github.com/patrickmn/go-cache, Google, github.com/aws/aws-sdk-go-v2/credentials, golang.org/x/oauth2, github.com/golang-jwt/jwt/v5, github.com/aws/aws-sdk-go-v2, github.com/aws/aws-sdk-go-v2/service/sts, github.com/moby/moby/client, github.com/aws/aws-sdk-go-v2/config, Prometheus
- Only in vault: github.com/hashicorp/go-memdb, github.com/jellydator/ttlcache/v3, Postgres, Consul, etcd, github.com/hashicorp/golang-lru, github.com/gocql/gocql, cloud.google.com/go/cloudsqlconn, github.com/denisenkom/go-mssqldb, github.com/influxdata/influxdb1-client, github.com/aliyun/aliyun-oss-go-sdk, github.com/aws/aws-sdk-go-v2/service/dynamodb, github.com/Azure/azure-storage-blob-go, github.com/cockroachdb/cockroach-go/v2, github.com/go-zookeeper/zk, github.com/hashicorp/raft-boltdb/v2, github.com/SAP/go-hdb, go.etcd.io/etcd/client/pkg/v3, go.etcd.io/etcd/client/v3, approle, github.com/go-jose/go-jose/v4, github.com/go-ldap/ldap/v3, github.com/pquerna/otp, github.com/Azure/azure-sdk-for-go/sdk/azidentity, github.com/Azure/go-autorest/autorest/adal, github.com/golang-jwt/jwt/v4, github.com/jcmturner/gokrb5/v8, github.com/pavlo-v-chernykh/keystore-go/v4, github.com/asaskevich/govalidator, HashiCorp, github.com/aws/aws-sdk-go-v2/service/ec2, github.com/moby/moby/api, github.com/aws/aws-sdk-go-v2/feature/ec2/imds, go.opentelemetry.io/otel/sdk, go.opentelemetry.io/otel/trace, Nomad, OpenTelemetry, cloud.google.com/go/compute/metadata, github.com/aliyun/alibaba-cloud-sdk-go, github.com/Azure/azure-sdk-for-go/sdk/azcore, github.com/coreos/go-systemd, github.com/prometheus/common, go.opencensus.io
- Only in trufflehog: pq, Redis, github.com/microsoft/go-mssqldb, github.com/aws/aws-sdk-go-v2/feature/s3/manager, github.com/jlaffaye/ftp, github.com/maypok86/otter/v2, RabbitMQ, Sentry, github.com/charmbracelet/bubbletea, github.com/charmbracelet/lipgloss, github.com/jedib0t/go-pretty/v6, github.com/charmbracelet/bubbles, github.com/schollz/progressbar/v3, github.com/bradleyfalzon/ghinstallation/v2, github.com/lestrrat-go/jwx/v3, github.com/bodgit/sevenzip, github.com/charmbracelet/glamour, protoc-gen-validate, github.com/go-logr/logr, go.uber.org/zap, github.com/go-logr/zapr

## Side by side

| | vault | trufflehog |
|---|---|---|
| Size | 1,007,660 lines written, 2,745 code files | 443,658 lines written, 1,276 code files |
| Who writes it | 0.3% of its commits signed by AI. With GitHub Copilot | 1.2% of its commits signed by AI. With Cursor and Claude Code |
| Activity | Last push November 6, 2026, 22,414 commits, 36,472 stars | Last push November 5, 2026, 4,711 commits, 28,948 stars |
| Tests | 1,904 test files. 33.7% of its code files have a test that imports them | 2,041 test files. 90% of its code files have a test that imports them |

- Size: Lines written by people and agents, without generated ones; code files, without tests.
- Who writes it: A commit counts as AI's when it carries its signature: a Co-Authored-By line, its author name or the merge of its branch.
- Activity: From GitHub and its history, on the day SeeRepo read it.
- Tests: The files that test the code, and the share of code files a test imports.

## Frequently asked questions

### Which is bigger, vault or trufflehog?

vault, with 1,007,660 lines written; trufflehog has 443,658.

The proof: [hashicorp/vault's code at commit f1c357b](https://github.com/hashicorp/vault/tree/f1c357b1d5d802a8ec0e1b7af82351f869ff80aa)

### Which has more GitHub stars, vault or trufflehog?

vault, with 36,472 stars; trufflehog has 28,948.

The proof: [hashicorp/vault on GitHub](https://github.com/hashicorp/vault)

### Which has more tests, vault or trufflehog?

trufflehog, with 2,041 test files; vault has 1,904.

The proof: [trufflesecurity/trufflehog's code at commit f8221ca](https://github.com/trufflesecurity/trufflehog/tree/f8221ca52ac51bf66228d6ec3691f3ea0782ae15)

### Which was updated more recently, vault or trufflehog?

vault: its last push was on November 6, 2026, and trufflehog's on November 5, 2026.

The proof: [hashicorp/vault's commits on GitHub](https://github.com/hashicorp/vault/commits)

### Which has more commits signed by AI, vault or trufflehog?

trufflehog: an AI signed 1.2% of its commits, with Cursor and Claude Code; in vault, 0.3%.

The proof: [the commits each tool signed in trufflesecurity/trufflehog](https://seerepo.com/r/trufflesecurity/trufflehog/ai)

## Sources

- hashicorp/vault: Read on November 7, 2026, at commit f1c357b (https://github.com/hashicorp/vault/tree/f1c357b1d5d802a8ec0e1b7af82351f869ff80aa)
- trufflesecurity/trufflehog: Read on November 8, 2026, at commit f8221ca (https://github.com/trufflesecurity/trufflehog/tree/f8221ca52ac51bf66228d6ec3691f3ea0782ae15)

## What is your repo built with?

Any public repo, with no account: https://seerepo.com/r/owner/repo/built, with the owner and name it has on GitHub.
