Secrets Management
How to Measure Time to Revoke for Exposed Credentials
Learn how to measure time to revoke for exposed credentials using validation and invalidation timestamps, remediation SLAs, and CISO reporting metrics.
MOST POPULAR
all tags
other
How to Measure Time to Revoke for Exposed Credentials
Learn how to measure time to revoke for exposed credentials using validation and invalidation timestamps, remediation SLAs, and CISO reporting metrics.
The Perimeter Moved to the Laptop: From Network, to Identity, to the Developer Endpoint
The security perimeter moved from network to identity to the device. Here’s why the developer endpoint is now where credentials concentrate – and the gap it leaves.
Identity Infrastructure: Why Credentials Are the Layer Directories Don't Secure
Learn why modern identity infrastructure security depends on credential exposure detection, not just directory management, and how to close the gaps that lead to breaches.
What CISA Got Right After Its GitHub Leak: Lessons Every Organization Should Copy
After the CISA GitHub leak, the agency published a candid incident postmortem. Here are six lessons security teams should copy, from secrets scanning to key rotation.
GitGuardian Power for Amazon Kiro: Secrets Detection Built Into the Agent
GitGuardian is now live on the Kiro Powers marketplace. Install the Power once, and Kiro's agent scans for exposed secrets automatically every time it writes or modifies code that handles credentials.
Every Laptop Is a Credential Store: Where Secrets Hide
Cloud keys, shell history, SSH keys, AI agent caches: a complete inventory of where credentials hide on a developer's machine, and why infostealers go looking there.
IEEE Cloud Summit 2026: The Tunnels No One Mapped
Explore cloud security lessons from IEEE Cloud Summit 2026, including agentic AI risks, over-permissioned identities, Kubernetes policy, and forensics.
Unified Secrets Security with GitGuardian and AWS Secrets Manager
While organizations invest in secrets management solutions like AWS Secrets Manager—a fully managed service for storing, rotating, and retrieving credentials—security teams still face a fundamental challenge: you can’t secure what you can’t see.
AI Is the Newest Developer To Misunderstand Secrets In Your Git History
AI assistants are repeating a common Git mistake: committing fixes that remove secrets only from the latest code, not from repository history. GitGuardian AI Skills can help.
Identiverse 2026: The Challenges Of Solving Identity For AI Agents At Scale
This year's event made it clear that as AI agents scale across enterprises, we must solve ownership, delegation, least privilege, and auditability before production risk grows.
Hunting Leaked PyPI Tokens: 62 Live, 125 Packages Exposed
We found 62 live PyPI tokens leaking on public sources, enough to push malicious code to 125 packages with 25,000 monthly downloads. We reported them to PyPI, which revoked every one. Here's how we decoded the macaroons and checked which still worked.
BSides San Antonio 2026: Following Trust Across Applications, Cloud, and Compliance
Sessions at BSidesSATX 2026 connected runtime secrets, cloud identity permissions, compliance evidence, and, ultimately, the human side of security.
