Secrets Sprawl Is an Identity Problem That AI Just Made Impossible to Ignore
AI coding agents are leaking secrets at twice the rate of human-written code.
A new report indicates that AI coding agents are contributing to a significant increase in secrets sprawl, leaking credentials at approximately twice the rate of human-written code. This acceleration is due to AI agents' ability to access and spread sensitive information across more systems than security teams can effectively track and rotate, highlighting a growing challenge in managing non-human identities.
AI summary of the linked source. Not reviewed by an editor. How this works
Run GitGuardian?
Get an email when a new story names GitGuardian, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonAI coding agents are leaking credentials and secrets at approximately twice the rate of human developers, largely because they autonomously access and propagate sensitive information across multiple systems without adequate oversight. The core problem is that non-human identities — API keys, tokens, and credentials used by AI agents — are poorly tracked, rarely rotated, and often hardcoded into repositories or configuration files. As AI adoption accelerates, security teams are losing visibility into where secrets live and how they are being consumed. This represents a critical identity governance gap: organizations designed their secrets management practices around human developers, not autonomous AI systems operating at machine speed and scale.
What helps against this
How we list vendors
- Identity governance and single sign-on
People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.
- Secrets management
API keys, tokens and passwords stop leaking from code, chat and configuration files.
- AI application security
Prompt injection, data leaks through AI tools and unapproved AI use get caught.