LEAKS detector
trufflehog PII detection benchmark
Measured on 3 of 41 retained datasets under the same frozen scoring and masking protocol.
7.89%fully hidden annotations
8.63%detected / overlapped
0.72%extra masking
—CPU characters / second
Strengths
Highest complete-masking rates by normalized data type.
Passwords, keys & tokens18.87%213 / 1,129
Bank accounts & cards0.00%0 / 169
Documents & identifiers0.00%0 / 609
Watch list
Lowest observed complete-masking rates; inspect before deployment.
Addresses & locations0.00%0 / 176
Phone numbers & email0.00%0 / 390
People's names0.00%0 / 228
Language coverage
The overall leader can differ from the best choice for one language slice.
| Language | Datasets | Fully hidden ↑ | Detected ↑ | Extra masking ↓ |
|---|---|---|---|---|
| English | 2 | 20.50% | 22.44% | 0.75% |
| Russian | 1 | 0.06% | 0.06% | 0.00% |
Configuration, source and version
- Family
- LEAKS
- Revision
- 3.97.4
- Eligible datasets
- 3 / 41
- Character F1
- 0.202
- Untouched diagnostic
- 91.37% · 2,468 / 2,701
- Benchmark version
- 1.0.3 · 2026-09-09
- CPU seconds / 10k chars
- Not measured
- GPU seconds / 10k chars
- Not measured
Results by dataset
Complete masking is primary; detection shows whether any character overlapped.
| Dataset | Gold annotations | Fully hidden ↑ | Detected ↑ | Extra masking ↓ |
|---|---|---|---|---|
| hivetrace | 1,667 | 0.06% | 0.06% | 0.00% |
| secrets-issues | 288 | 12.50% | 15.28% | 0.38% |
| secrets-rules | 746 | 23.59% | 25.20% | 4.59% |