Source: https://seerepo.com/compare/projectdiscovery/nuclei/vs/trufflesecurity/trufflehog
Markdown source: https://seerepo.com/compare/projectdiscovery/nuclei/vs/trufflesecurity/trufflehog.md
Description: nuclei and trufflehog share 12 technologies: MongoDB, pq, s3, MySQL, github.com/aws/aws-sdk-go-v2/feature/s3/manager, github.com/microsoft/go-mssqldb, github.com/maypok86/otter/v2, github.com/aws/aws-sdk-go-v2/credentials, golang.org/x/oauth2, github.com/charmbracelet/glamour, github.com/aws/aws-sdk-go-v2, and github.com/aws/aws-sdk-go-v2/config. Both are written in Go.

# nuclei vs trufflehog

nuclei and trufflehog share 12 technologies: MongoDB, pq, s3, MySQL, github.com/aws/aws-sdk-go-v2/feature/s3/manager, github.com/microsoft/go-mssqldb, github.com/maypok86/otter/v2, github.com/aws/aws-sdk-go-v2/credentials, golang.org/x/oauth2, github.com/charmbracelet/glamour, github.com/aws/aws-sdk-go-v2, and github.com/aws/aws-sdk-go-v2/config. Both are written in Go.

- [projectdiscovery/nuclei](https://seerepo.com/r/projectdiscovery/nuclei): Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
- [trufflesecurity/trufflehog](https://seerepo.com/r/trufflesecurity/trufflehog): Find, verify, and analyze leaked credentials

## What they share and what sets them apart

- In common: MongoDB, pq, s3, MySQL, github.com/aws/aws-sdk-go-v2/feature/s3/manager, github.com/microsoft/go-mssqldb, github.com/maypok86/otter/v2, github.com/aws/aws-sdk-go-v2/credentials, golang.org/x/oauth2, github.com/charmbracelet/glamour, github.com/aws/aws-sdk-go-v2, github.com/aws/aws-sdk-go-v2/config
- Only in nuclei: net/http, go-redis, go-sqlite3, github.com/projectdiscovery/hmap, SQLite, github.com/syndtr/goleveldb, HashiCorp, github.com/Azure/azure-sdk-for-go/sdk/storage/azblob, github.com/sijms/go-ora/v2, GitHub, AWS S3, github.com/julienschmidt/httprouter, github.com/olekukonko/tablewriter, github.com/go-ldap/ldap/v3, github.com/jcmturner/gokrb5/v8, github.com/Azure/azure-sdk-for-go/sdk/azidentity, github.com/Azure/go-ntlmssp, github.com/antchfx/xmlquery, github.com/antchfx/xpath, github.com/go-pdf/fpdf, github.com/invopop/jsonschema, github.com/getkin/kin-openapi, github.com/go-playground/validator/v10, github.com/projectdiscovery/gologger, github.com/rs/zerolog
- Only in trufflehog: pgx, Redis, github.com/hashicorp/golang-lru/v2, github.com/jlaffaye/ftp, github.com/patrickmn/go-cache, RabbitMQ, Google, Sentry, github.com/charmbracelet/bubbletea, github.com/charmbracelet/lipgloss, github.com/jedib0t/go-pretty/v6, github.com/charmbracelet/bubbles, github.com/schollz/progressbar/v3, github.com/golang-jwt/jwt/v5, github.com/bradleyfalzon/ghinstallation/v2, github.com/lestrrat-go/jwx/v3, github.com/bodgit/sevenzip, protoc-gen-validate, Prometheus, github.com/go-logr/logr, go.uber.org/zap, github.com/aws/aws-sdk-go-v2/service/sts, github.com/go-logr/zapr, github.com/moby/moby/client

## Side by side

| | nuclei | trufflehog |
|---|---|---|
| Size | 184,336 lines written, 580 code files | 443,658 lines written, 1,276 code files |
| Who writes it | 0.7% of its commits signed by AI. With Claude Code, CodeRabbit, Codex, and GitHub Copilot | 1.2% of its commits signed by AI. With Cursor and Claude Code |
| Activity | Last push November 7, 2026, 5,234 commits, 32,656 stars | Last push November 5, 2026, 4,711 commits, 28,948 stars |
| Tests | 422 test files. 66.2% of its code files have a test that imports them | 2,041 test files. 90% of its code files have a test that imports them |

- Size: Lines written by people and agents, without generated ones; code files, without tests.
- Who writes it: A commit counts as AI's when it carries its signature: a Co-Authored-By line, its author name or the merge of its branch.
- Activity: From GitHub and its history, on the day SeeRepo read it.
- Tests: The files that test the code, and the share of code files a test imports.

## Frequently asked questions

### Which is bigger, nuclei or trufflehog?

trufflehog, with 443,658 lines written; nuclei has 184,336.

The proof: [trufflesecurity/trufflehog's code at commit f8221ca](https://github.com/trufflesecurity/trufflehog/tree/f8221ca52ac51bf66228d6ec3691f3ea0782ae15)

### Which has more GitHub stars, nuclei or trufflehog?

nuclei, with 32,656 stars; trufflehog has 28,948.

The proof: [projectdiscovery/nuclei on GitHub](https://github.com/projectdiscovery/nuclei)

### Which has more tests, nuclei or trufflehog?

trufflehog, with 2,041 test files; nuclei has 422.

The proof: [trufflesecurity/trufflehog's code at commit f8221ca](https://github.com/trufflesecurity/trufflehog/tree/f8221ca52ac51bf66228d6ec3691f3ea0782ae15)

### Which was updated more recently, nuclei or trufflehog?

nuclei: its last push was on November 7, 2026, and trufflehog's on November 5, 2026.

The proof: [projectdiscovery/nuclei's commits on GitHub](https://github.com/projectdiscovery/nuclei/commits)

### Which has more commits signed by AI, nuclei or trufflehog?

trufflehog: an AI signed 1.2% of its commits, with Cursor and Claude Code; in nuclei, 0.7%.

The proof: [the commits each tool signed in trufflesecurity/trufflehog](https://seerepo.com/r/trufflesecurity/trufflehog/ai)

## Sources

- projectdiscovery/nuclei: Read on November 7, 2026, at commit 8cda906 (https://github.com/projectdiscovery/nuclei/tree/8cda90655970270b215749b42ab59ecc38669293)
- trufflesecurity/trufflehog: Read on November 8, 2026, at commit f8221ca (https://github.com/trufflesecurity/trufflehog/tree/f8221ca52ac51bf66228d6ec3691f3ea0782ae15)

## What is your repo built with?

Any public repo, with no account: https://seerepo.com/r/owner/repo/built, with the owner and name it has on GitHub.
