Why We Built the Good Samaritan Program
The first thing GitGuardian ever shipped was a free warning. Now we’re making sure it gets heard.
AWS S3 Bucket Security: Find the Secrets Hiding Outside Git
S3 buckets have quietly become a credential blind spot: years of logs, backups, and pipeline output that nobody ever scans for secrets. In one 2025 incident (Sysdig), attackers reached admin access in eight minutes using IAM keys found in a public bucket.
Agentic AI Security: Credentials and Permissions Define the Blast Radius
* The trick matters less than the access. Three 2026 disclosures, GitLost, Claude Code's CVE-2026-21852, and Amazon Q's CVE-2026-12957, show agent manipulation determines less damage than the credentials and permissions the agent can reach. * Secrets exposure keeps
Why Secrets Slip Through Every Layer of Your Security Stack
Your security stack is a set of specialists, each guarding one territory. Exposed credentials don't respect the boundaries between them, and 64% of the ones found valid in 2022 were still valid four years later.
How to Reduce Time to Revoke for Exposed Credentials
Learn how to measure time to revoke for exposed credentials using validation and invalidation timestamps, remediation SLAs, and CISO reporting metrics.
Identity Infrastructure: Why Credentials Are the Layer Directories Don't Secure
Learn why modern identity infrastructure security depends on credential exposure detection, not just directory management, and how to close the gaps that lead to breaches.
Leaked Kubernetes Secrets: Impact Assessment and Mitigation Strategies
A single leaked Kubernetes credential rarely stays in the cluster. It opens the registry credentials, private Docker images, and private GitHub repositories behind it. In Q1 2026 alone, our detectors caught close to 2,000 new such leaks on GitHub, 28% valid at leak time.
What the Mythos-Ready Briefing Says About Credentials
The Mythos-ready briefing names secrets rotation, NHI governance, and honeytokens as critical controls. Zero-days don't replace credential attacks; they accelerate them. Credential security deserves to move up every CISO's priority list.
Responding to Exposed Secrets - An SRE's Incident Response Playbook
Today, let's take a closer look at incident response playbooks: how to build one, tailor it for secret leaks, take actions, and learn from incidents.
TOP 15 Secret Scanning Tools 2026: Protect Code (but not only!) and Prevent Credential Leaks
Leaked credentials are one of the fastest paths to a breach. This guide compares the 18 best secrets detection tools for 2026 that help security teams find exposed API keys, database credentials, and hardcoded secrets before attackers do.
How Orange Business Transformed Secrets Security with a Prevention-First Approach
From overwhelming alert fatigue to actionable intelligence: How one of Europe's largest telecom operators is building enterprise-scale secrets security with developer experience in mind.
API Key Security: 7 Enterprise-Proven Methods to Prevent Costly Data Breaches
In this blog, we will navigate through a few enterprise-proven methods to make API key more secure. Read on!
