[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"control:secrets-management":3},{"control":4,"products":25,"stories":58,"lessons":102,"related":127,"compare":148},{"slug":5,"name":6,"problem":7,"summary":8,"business_value":9,"vendor_questions":10,"risk_register":15,"framework_refs":16,"area":21,"updated_at":24},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.","A vault for machine credentials, short-lived tokens instead of long-lived keys, and scanning that finds secrets committed to code repositories, tickets and chat.","Leaked cloud keys and tokens are behind many cloud breaches and data thefts, and attackers scan public code for them within minutes. Central secrets and leak scanning cut that exposure, and turn rotation after an incident into hours of work instead of weeks.",[11,12,13,14],"Does it scan our full code history and tools like chat and ticketing, not just new commits?","Can it issue short-lived credentials, so a leaked key expires on its own?","How fast can we rotate every secret after an incident?","Does it integrate with our build pipelines and cloud providers?","Risk: leaked API keys or tokens give access to cloud and SaaS data. Control: secrets vault, short-lived credentials and leak scanning. Owner: platform engineering lead. Measure: open secret-leak findings and median rotation time.",[17,18,19,20],"NIS2 Art. 21(2)(h): cryptography and key management","DORA Art. 9: protection of cryptographic keys","CIS Control 3: data protection","ISO\u002FIEC 27001:2022 A.5.17: authentication information",{"name":22,"slug":23},"Access Control","access-control","2026-10-16T12:48:06.117524+00:00",[26,34,42,50],{"vendor_slug":27,"vendor_name":28,"vendor_logo":29,"product_slug":30,"product_name":31,"url":32,"description":33},"gitguardian","GitGuardian","\u002Fvendor-logos\u002Fgitguardian.png","gitguardian-platform","GitGuardian Secrets Detection","https:\u002F\u002Fwww.gitguardian.com\u002F","Finds and helps remediate secrets leaked in repositories, CI pipelines and chat tools.",{"vendor_slug":35,"vendor_name":36,"vendor_logo":37,"product_slug":38,"product_name":39,"url":40,"description":41},"github","GitHub","\u002Fvendor-logos\u002Fgithub.png","advanced-security","GitHub Advanced Security","https:\u002F\u002Fgithub.com\u002Fsecurity\u002Fadvanced-security","Dependency review, code scanning and secret scanning with push protection.",{"vendor_slug":43,"vendor_name":44,"vendor_logo":45,"product_slug":46,"product_name":47,"url":48,"description":49},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"vendor_slug":51,"vendor_name":52,"vendor_logo":53,"product_slug":54,"product_name":55,"url":56,"description":57},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-secrets-management","Idira Secrets Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fmachine\u002Fsecrets-management","Secrets management for applications, scripts and pipelines, from the former CyberArk portfolio.",{"total":59,"last_days":60,"recent":61},579,220,[62,67,72,77,82,87,92,97],{"slug":63,"title":64,"published_at":65,"brief":66},"artex-attackers-adopted-this-ai-pentesting-tool-in-three-months-leaked-secrets-a-8d732f","ARTEX: Attackers Adopted This AI Pentesting Tool in Three Months. Leaked Secrets Are Its Fastest Way In.","2026-11-13T15:22:30+00:00","Attackers are using the AI pentesting tool ARTEX, with leaked secrets providing the fastest entry.",{"slug":68,"title":69,"published_at":70,"brief":71},"in-other-news-new-cisa-director-nominee-connected-car-hacking-baker-tilly-data-b-096388","In Other News: New CISA Director Nominee, Connected Car Hacking, Baker Tilly Data Breach","2026-11-13T15:20:00+00:00","Security news roundup includes crypto theft, Baker Tilly data breach, OpenAI agent issues, and Siemens advisory policy.",{"slug":73,"title":74,"published_at":75,"brief":76},"hackers-use-4-837-stolen-github-accounts-to-target-61-764-repositories-318bd2","Hackers Use 4,837 Stolen GitHub Accounts to Target 61,764 Repositories","2026-11-13T09:41:06+00:00","Hackers used 4,837 stolen GitHub accounts to target 61,764 repositories in the wfx-loot campaign.",{"slug":78,"title":79,"published_at":80,"brief":81},"your-pinned-mcp-server-may-not-be-as-pinned-as-you-think-2165b8","Your pinned MCP server may not be as pinned as you think","2026-11-13T05:30:22+00:00","MCP servers can drift from pinned versions, exposing AI coding assistants to dependency risks.",{"slug":83,"title":84,"published_at":85,"brief":86},"self-hosted-claude-managed-agents-keeps-agent-credentials-in-your-environment-a53dac","Self-hosted Claude Managed Agents keeps agent credentials in your environment","2026-11-12T18:07:00+00:00","Anthropic releases self-hosted Claude Managed Agents for private beta.",{"slug":88,"title":89,"published_at":90,"brief":91},"apify-rotates-api-tokens-prompts-2fa-resets-after-breach-92e206","Apify rotates API tokens, prompts 2FA resets after breach","2026-11-12T14:36:47+00:00","Apify rotates API tokens and resets 2FA after detecting unauthorized access to internal systems.",{"slug":93,"title":94,"published_at":95,"brief":96},"attacker-targets-60-000-github-repositories-in-credential-theft-campaign-92fa12","Attacker Targets 60,000 GitHub Repositories in Credential Theft Campaign","2026-11-12T13:39:03+00:00","Attacker targets 60,000 GitHub repos with credential-stealing malware via hijacked accounts.",{"slug":98,"title":99,"published_at":100,"brief":101},"hackers-abuse-antifox-ai-pentesting-tool-to-deploy-webshells-and-access-aws-prod-858104","Hackers Abuse AntiFox AI Pentesting Tool to Deploy Webshells and Access AWS Production Secrets","2026-11-12T11:42:54+00:00","Hackers exploit AntiFox AI pentesting tool to deploy webshells and steal AWS production secrets.",[103,107,111,115,119,123],{"slug":104,"title":105,"published_at":106},"baker-tilly-breach-and-ai-privilege-escalation-highlight-third-party-and-access-control-risks","Baker Tilly Breach and AI Privilege Escalation Highlight Third-Party and Access Control Risks","2026-11-13T16:21:20.633+00:00",{"slug":108,"title":109,"published_at":110},"leaked-secrets-and-a-backdoored-ai-tool-give-attackers-cloud-access-in-minutes","Leaked Secrets and a Backdoored AI Tool Give Attackers Cloud Access in Minutes","2026-11-13T16:21:03.622+00:00",{"slug":112,"title":113,"published_at":114},"compromised-github-accounts-weaponized-to-poison-thousands-of-repositories","Compromised GitHub Accounts Weaponized to Poison Thousands of Repositories","2026-11-13T10:20:30.167+00:00",{"slug":116,"title":117,"published_at":118},"mcp-server-pinning-drift-exposes-ai-coding-assistants-to-malicious-dependencies","MCP Server 'Pinning Drift' Exposes AI Coding Assistants to Malicious Dependencies","2026-11-13T06:20:23.867+00:00",{"slug":120,"title":121,"published_at":122},"compromised-github-accounts-used-to-steal-cloud-secrets-via-injected-cicd-workflows","Compromised GitHub Accounts Used to Steal Cloud Secrets via Injected CI\u002FCD Workflows","2026-11-12T23:20:40.136+00:00",{"slug":124,"title":125,"published_at":126},"self-hosted-ai-agents-demand-rigorous-credential-and-configuration-controls","Self-Hosted AI Agents Demand Rigorous Credential and Configuration Controls","2026-11-12T19:21:17.711+00:00",[128,132,136,140,144],{"slug":129,"name":130,"problem":131},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",{"slug":133,"name":134,"problem":135},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",{"slug":137,"name":138,"problem":139},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",{"slug":141,"name":142,"problem":143},"identity-governance","Identity governance and single sign-on","People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.",{"slug":145,"name":146,"problem":147},"zero-trust-access","Zero trust network access (ZTNA)","Remote access no longer means exposing VPN appliances to the internet.",{"hashicorp\u002Fvault":149,"gitguardian\u002Fgitguardian-platform":164,"github\u002Fadvanced-security":176,"palo-alto-networks\u002Fidira-secrets-management":189},{"hq_country":150,"also_provides":151,"reviews":155,"affected":162,"reported":163},"US",[152],{"slug":153,"name":154},"encryption-key-management","Encryption and key management",[156,159],{"label":157,"url":158},"PeerSpot: HashiCorp Vault user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fhashicorp-vault-reviews",{"label":160,"url":161},"Gartner Peer Insights: IBM Vault (formerly HashiCorp Vault) user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fibm-vault",2,1,{"hq_country":165,"also_provides":166,"reviews":167,"affected":174,"reported":175},"FR",[],[168,171],{"label":169,"url":170},"PeerSpot: GitGuardian Platform user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fgitguardian-platform-reviews",{"label":172,"url":173},"Gartner Peer Insights: GitGuardian Platform user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fgitguardian-platform",0,6,{"hq_country":150,"also_provides":177,"reviews":181,"affected":188,"reported":175},[178],{"slug":179,"name":180},"software-supply-chain","Software supply chain security",[182,185],{"label":183,"url":184},"Gartner Peer Insights: GitHub user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fgithub-826147115",{"label":186,"url":187},"PeerSpot: GitHub Advanced Security user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fgithub-advanced-security-reviews",36,{"hq_country":150,"also_provides":190,"reviews":191,"affected":204,"reported":205},[],[192,195,198,201],{"label":193,"url":194},"AV-Comparatives EPR test 2026: Palo Alto Networks","https:\u002F\u002Fwww.av-comparatives.org\u002Fwp-content\u002Fuploads\u002F2026\u002F09\u002FEPR_PaloAlto_2026.pdf",{"label":196,"url":197},"CyberRatings 2025 Q4 Enterprise Firewall Report: Palo Alto Networks follow-on","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q4-enterprise-firewall-report-palo-alto-networks-follow-on\u002F",{"label":199,"url":200},"PeerSpot: Palo Alto Networks NG Firewalls user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fpalo-alto-networks-ng-firewalls-reviews",{"label":202,"url":203},"Gartner Peer Insights: PA-Series user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fpa-series",22,43]