[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"control:secrets-management":3},{"control":4,"products":25,"stories":58,"lessons":102,"related":127,"compare":148},{"slug":5,"name":6,"problem":7,"summary":8,"business_value":9,"vendor_questions":10,"risk_register":15,"framework_refs":16,"area":21,"updated_at":24},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.","A vault for machine credentials, short-lived tokens instead of long-lived keys, and scanning that finds secrets committed to code repositories, tickets and chat.","Leaked cloud keys and tokens are behind many cloud breaches and data thefts, and attackers scan public code for them within minutes. Central secrets and leak scanning cut that exposure, and turn rotation after an incident into hours of work instead of weeks.",[11,12,13,14],"Does it scan our full code history and tools like chat and ticketing, not just new commits?","Can it issue short-lived credentials, so a leaked key expires on its own?","How fast can we rotate every secret after an incident?","Does it integrate with our build pipelines and cloud providers?","Risk: leaked API keys or tokens give access to cloud and SaaS data. Control: secrets vault, short-lived credentials and leak scanning. Owner: platform engineering lead. Measure: open secret-leak findings and median rotation time.",[17,18,19,20],"NIS2 Art. 21(2)(h): cryptography and key management","DORA Art. 9: protection of cryptographic keys","CIS Control 3: data protection","ISO\u002FIEC 27001:2022 A.5.17: authentication information",{"name":22,"slug":23},"Access Control","access-control","2026-10-16T12:48:06.117524+00:00",[26,34,42,50],{"vendor_slug":27,"vendor_name":28,"vendor_logo":29,"product_slug":30,"product_name":31,"url":32,"description":33},"gitguardian","GitGuardian","\u002Fvendor-logos\u002Fgitguardian.png","gitguardian-platform","GitGuardian Secrets Detection","https:\u002F\u002Fwww.gitguardian.com\u002F","Finds and helps remediate secrets leaked in repositories, CI pipelines and chat tools.",{"vendor_slug":35,"vendor_name":36,"vendor_logo":37,"product_slug":38,"product_name":39,"url":40,"description":41},"github","GitHub","\u002Fvendor-logos\u002Fgithub.png","advanced-security","GitHub Advanced Security","https:\u002F\u002Fgithub.com\u002Fsecurity\u002Fadvanced-security","Dependency review, code scanning and secret scanning with push protection.",{"vendor_slug":43,"vendor_name":44,"vendor_logo":45,"product_slug":46,"product_name":47,"url":48,"description":49},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"vendor_slug":51,"vendor_name":52,"vendor_logo":53,"product_slug":54,"product_name":55,"url":56,"description":57},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-secrets-management","Idira Secrets Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fmachine\u002Fsecrets-management","Secrets management for applications, scripts and pipelines, from the former CyberArk portfolio.",{"total":59,"last_days":60,"recent":61},442,122,[62,67,72,77,82,87,92,97],{"slug":63,"title":64,"published_at":65,"brief":66},"connectwise-suspends-cloud-backup-after-attackers-compromise-microsoft-365-tenan-1a74dd","ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants","2026-10-18T08:23:02+00:00","ConnectWise disables cloud backup after attackers compromise Microsoft 365 tenants.",{"slug":68,"title":69,"published_at":70,"brief":71},"claude-code-desktop-flaw-let-malicious-html-steal-developer-credentials-8279a0","Claude Code Desktop Flaw Let Malicious HTML Steal Developer Credentials","2026-10-16T17:35:05+00:00","Claude Code Desktop flaw allowed malicious HTML to steal developer credentials and private keys.",{"slug":73,"title":74,"published_at":75,"brief":76},"cert-in-warns-ai-agents-accessed-sensitive-data-at-indian-organizations-during-t-9e713c","CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing","2026-10-16T06:53:09+00:00","AI agents accessed sensitive data at Indian organizations during testing, CERT-In reports.",{"slug":78,"title":79,"published_at":80,"brief":81},"ghostaction-compromises-about-1-900-github-accounts-targets-over-30-000-reposito-871699","GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositories","2026-10-15T08:45:10+00:00","GhostAction campaign compromises 1,900 GitHub accounts, targets 30,000+ repositories.",{"slug":83,"title":84,"published_at":85,"brief":86},"anthropic-sneakpeek-flaw-is-a-silent-zero-click-threat-27378f","Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat","2026-10-14T20:09:42+00:00","Anthropic Claude Code Desktop flaw allows silent zero-click credential theft.",{"slug":88,"title":89,"published_at":90,"brief":91},"docker-fixes-critical-two-year-old-hub-flaw-that-let-one-user-push-images-as-ano-f459c5","Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another","2026-10-13T18:03:18+00:00","Docker Hub flaw allowed users to push images as others; fixed in September 2026.",{"slug":93,"title":94,"published_at":95,"brief":96},"agent-baseline-publishes-security-reference-architecture-for-software-factories-68c07d","Agent Baseline Publishes Security Reference Architecture for Software Factories","2026-10-13T17:54:48.146+00:00","Agent Baseline releases reference architecture for securing AI-driven software factories.",{"slug":98,"title":99,"published_at":100,"brief":101},"github-tightens-npm-publishing-after-flaw-left-1-500-packages-vulnerable-to-hija-3d29c8","GitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijacking","2026-10-13T16:18:18+00:00","GitHub expires npm trusted publishing configs after 48 hours to prevent package hijacking.",[103,107,111,115,119,123],{"slug":104,"title":105,"published_at":106},"connectwise-cloud-backup-suspended-after-microsoft-365-tenant-compromise","ConnectWise Cloud Backup Suspended After Microsoft 365 Tenant Compromise","2026-10-18T10:20:20.475+00:00",{"slug":108,"title":109,"published_at":110},"claude-code-desktop-flaw-enabled-html-based-credential-theft","Claude Code Desktop Flaw Enabled HTML-Based Credential Theft","2026-10-16T18:20:18.997+00:00",{"slug":112,"title":113,"published_at":114},"ai-agents-accessed-live-sensitive-data-during-testing-due-to-exposed-credentials-and-excessive-permi","AI Agents Accessed Live Sensitive Data During Testing Due to Exposed Credentials and Excessive Permissions","2026-10-16T08:20:59.754+00:00",{"slug":116,"title":117,"published_at":118},"ghostaction-credential-theft-hits-1900-github-accounts-and-30000-repos","GhostAction Credential Theft Hits 1,900 GitHub Accounts and 30,000+ Repos","2026-10-15T10:20:51.258+00:00",{"slug":120,"title":121,"published_at":122},"zero-click-sneakpeek-flaw-silently-exfiltrates-developer-credentials-from-claude-code","Zero-Click 'SneakPeek' Flaw Silently Exfiltrates Developer Credentials from Claude Code","2026-10-14T22:21:07.285+00:00",{"slug":124,"title":125,"published_at":126},"ai-coding-agents-need-zero-trust-security-boundaries-to-prevent-production-disasters","AI Coding Agents Need Zero-Trust Security Boundaries to Prevent Production Disasters","2026-10-13T22:21:43.666+00:00",[128,132,136,140,144],{"slug":129,"name":130,"problem":131},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",{"slug":133,"name":134,"problem":135},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",{"slug":137,"name":138,"problem":139},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",{"slug":141,"name":142,"problem":143},"identity-governance","Identity governance and single sign-on","People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.",{"slug":145,"name":146,"problem":147},"zero-trust-access","Zero trust network access (ZTNA)","Remote access no longer means exposing VPN appliances to the internet.",{"hashicorp\u002Fvault":149,"gitguardian\u002Fgitguardian-platform":164,"github\u002Fadvanced-security":175,"palo-alto-networks\u002Fidira-secrets-management":189},{"hq_country":150,"also_provides":151,"reviews":155,"affected":162,"reported":163},"US",[152],{"slug":153,"name":154},"encryption-key-management","Encryption and key management",[156,159],{"label":157,"url":158},"PeerSpot: HashiCorp Vault user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fhashicorp-vault-reviews",{"label":160,"url":161},"Gartner Peer Insights: IBM Vault (formerly HashiCorp Vault) user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fibm-vault",3,0,{"hq_country":165,"also_provides":166,"reviews":167,"affected":163,"reported":174},"FR",[],[168,171],{"label":169,"url":170},"PeerSpot: GitGuardian Platform user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fgitguardian-platform-reviews",{"label":172,"url":173},"Gartner Peer Insights: GitGuardian Platform user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fgitguardian-platform",5,{"hq_country":150,"also_provides":176,"reviews":180,"affected":187,"reported":188},[177],{"slug":178,"name":179},"software-supply-chain","Software supply chain security",[181,184],{"label":182,"url":183},"Gartner Peer Insights: GitHub user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fgithub-826147115",{"label":185,"url":186},"PeerSpot: GitHub Advanced Security user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fgithub-advanced-security-reviews",15,4,{"hq_country":150,"also_provides":190,"reviews":191,"affected":204,"reported":205},[],[192,195,198,201],{"label":193,"url":194},"AV-Comparatives EPR test 2026: Palo Alto Networks","https:\u002F\u002Fwww.av-comparatives.org\u002Fwp-content\u002Fuploads\u002F2026\u002F09\u002FEPR_PaloAlto_2026.pdf",{"label":196,"url":197},"CyberRatings 2025 Q4 Enterprise Firewall Report: Palo Alto Networks follow-on","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q4-enterprise-firewall-report-palo-alto-networks-follow-on\u002F",{"label":199,"url":200},"PeerSpot: Palo Alto Networks NG Firewalls user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fpalo-alto-networks-ng-firewalls-reviews",{"label":202,"url":203},"Gartner Peer Insights: PA-Series user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fpa-series",9,32]