A historical scan can surface hundreds or thousands of incidents at once. GitGuardian's incident table is built to answer what to work on first: verified validity, automated severity scoring across 24 rule sets, and saved filtered views. youtu.be/Fhj83rW1lOQ

ggshield can plant honey tokens directly from your terminal. Decoy AWS keys that look real, grant no access, and alert you the moment someone tries to use them. Trip wires for your codebase. youtu.be/UsLGa44CugM

GitGuardian now scans Gerrit. Full historical scan on connect, real-time scanning on every new commit and comment. Findings land in the same dashboard as your GitHub, GitLab, and Bitbucket incidents. youtu.be/q1XzY6HvxAI

AI coding assistants read files, run commands, and call tools. ggshield AI hooks scan at each of those points and block secrets before they reach prompts, logs, or generated code. One install command. Works with Cursor, Claude Code, and Copilot. youtu.be/he0Ynu32puQ

GitGuardian's updated search bar lets you triage incidents by pasting a secret value, typing an author email, a file path, or plain language like "open critical unassigned cloud incidents." Available now on every plan. youtu.be/LSrBUCvJaLM

When a breach happens, you need to account for every secret: which were in CI, which were on developer laptops, which processes had access. That inventory is what you show your board. youtube.com/shorts/EOrZm...

When an LLM hits a security constraint, GitGuardian research shows it often goes around it, silently, and hardcodes the secret. The developer didn't make that call. The model did. youtube.com/shorts/999wS...

GitGuardian's VS Code extension now shows all secret findings in a sidebar panel — across every file, before you commit. Works in Cursor and Windsurf too. Catch it on save, not in CI. youtu.be/d18uYyOhez8

One stolen PAT in February. Trivy poisoned March 19. Eight days later: Aqua, Checkmarx, LiteLLM, and Telnyx all compromised because they automatically consumed the update. This is what supply chain cascade looks like. youtube.com/shorts/qa-47...

ggshield 1.51: AI hooks now cover Codex alongside #Claude, #ChatGPT, and #Cursor. #MCP server discovery extended to plugin-installed servers. Plus oob (out-of-band) auth, better SLSA provenance, and improved API status. youtu.be/RCIeYF3nkn0

Claude Code co-authored commits leak secrets at 2.4× the human baseline. Larger commits, more lines, more exposure surface. AI speeds up development — and quietly expands the attack surface. youtube.com/shorts/9jEDl...

Claude Code co-authored commits leak secrets at 2.4× the human baseline. Larger commits, more lines, more exposure surface. AI speeds up development — and quietly expands the attack surface. youtube.com/shorts/9jEDl...

A CISA contractor pushed AWS GovCloud admin keys to a public GitHub repo in November. It sat there for 6 months, after GitGuardian sent 7–10 alerts. No response. Guillaume Valadon walks us through how we escalated this disclosure: youtu.be/mWIgasN3K7Q

Exploiting a vulnerability targets production. Malware targets the developer. That's not a subtle difference: it's where the credentials live: youtube.com/shorts/2-9e4...

75,000 open incidents is normal for GitGuardian customers. A "generic IAM copy" enriched to "Microsoft credential, publicly leaked" = risk score 100. That's ML-powered triage in practice: youtu.be/iyKHvK3g9g8

After a developer machine compromise: what secrets were exposed, where, and what needs rotation now? GitGuardian Developer Endpoint Protection scans your fleet via MDM and answers all three: youtu.be/IDzSiJQCZZA

Every time a developer pushes a secret to public GitHub, GitGuardian emails them directly. That's the Good Samaritan program. Millions of alerts sent per year: youtube.com/shorts/dUzjI...

Gerrit is one of the most widely deployed code review platforms in enterprise environments, yet a blind spot for secrets detection. GitGuardian now scans it, historically and in real time: youtu.be/q1XzY6HvxAI

.env files are plain text secrets on a machine that's a supply chain target. ggshield 1.50 moves API tokens to your OS credential store by default and extends AI hooks to the MCP layer. Full breakdown: youtu.be/4c983T8hAyc

Cmd+K from anywhere in GitGuardian and jump to incidents, settings, integrations, or docs without leaving your workspace. Context-aware, role-scoped. Small thing, saves real time mid-incident: youtu.be/Jx-RpuMX7ak

Ask GitGuardian "what are my top 10 public incidents right now?" and it answers. Natural language triage against all your incidents, in-app. Same 23 tools as the MCP server. Full demo: youtu.be/AqVPvAjkGR0

New Episode • Built Fast, Broken Faster: MCP & AI App Security—with GitGuardian’s Gaetan Ferry https://trustory.fm/cybersentries/built-fast-broken-faster-mcp-ai-app-security-with-gitguardians-gaetan-ferry/

90B events/day and we’re still manually doing L1 triage? That’s not resilience, that’s ✨tradition✨. #ChiBrrCon 2026 takeaway: automate the repetitive, keep humans for judgment, and build real inventories. #AppSec #AI blog.gitguardian.com/chibrrcon-20...

Why prevention-first secrets security will define enterprise scale: Learnings from a leading telecom 📖 Read more: www.helpnetsecurity.com/2026/01/28/g... #cybersecurity #cybersecuritynews #telecommunications #remediation @gitguardian.com

Cheat Sheet Alert! "How To Use ggshield To Avoid Hardcoded Secrets" by Dwayne McDaniel from @gitguardian.com December 10, 2025. GitGuardian's ggshield can help you quickly find any secrets in your repos, local files, archives, and commits. cybersec.gitguardian.com/s/how-to-use...

🤖 Agents don’t log in. They act. At #NHIcon 2026 the message was clear: human-centric IAM breaks in the age of agentic AI. Static roles + long-lived creds = 🚨 risk amplification. Time for identity at the speed of autonomy. 🔐 blog.gitguardian.com/nhicon-2026

Secrets sprawl ≠ developer mistakes. It’s unmanaged machine access at scale. Boards care about downtime, cost, and resilience, and NHIs sit right in the middle. Here’s how to connect the dots 👇 blog.gitguardian.com/boards-focus...

AI agents aren’t your coworkers. They’re over-permissioned bots with access to prod. Stop pretending they’re cute. Start treating them like risks. 🛑 NHI governance now! blog.gitguardian.com/what-ai-agen...

AI agents are already causing incidents, and identity controls aren’t ready. Jan 27: Join GitGuardian at #NHIcon2026. Talk: “How Agentic AI Helps You Leak Secrets (and What to Do About It)” (1 PM PST, Builders Track) w/ @mdwayne-real.bsky.social Free registration here: aembit.io/nhicon?aff=G...

The next OWASP London Chapter in-person Meetup will take place on January 21st, 2026, kindly sponsored by @nuaware_tech with raffle prizes kindly sponsored by @GitGuardian and @Docker Register to attend this event here: 👇

Andy Rea built a demo showing how to wire up multiple AI agents using Google's Agent Development Kit (ADK) and the #A2A protocol, with GitGuardian scanning content for secrets. blog.gitguardian.com/building-a-m... The complete code is available at: github.com/reaandrew/a2...

🚀 The future of secure non‑human identity is here! AWS IAM Outbound Identity Federation eliminates long‑term creds in favor of short‑lived tokens. GitGuardian can help you track the migration in real time. blog.gitguardian.com/aws-iam-outb... #DevSecOps #AppSec

Secrets leaked? Don’t panic—push to vault! 🧯 GitGuardian's Push-to-Vault turns “uh-oh” into “handled” by sending secrets straight into your existing Secret Manager. No more tab juggling. blog.gitguardian.com/push-to-vault/

🔄 Feature flags, legacy systems, and N+1 queries walk into a dev conf... /dev/mtl 2025 reminds us: it’s not about speed, it’s about smart feedback loops. #DevSecOps blog.gitguardian.com/dev-mtl-2025/

🚨 #Shai_Hulud techincal analysis is live We've completed our forensic analysis of the Nov 24 supply chain attack. 754 infected npm packages, 20,649 analyzed repositories, 33,185 unique secrets (3,760 valid). blog.gitguardian.com/shai-hulud-2/

🔐 The 2025 #OWASP Top 10 2025 says it loud: access control still #1, but now supply chains & mis‑configs steal the spotlight. Ready your CI/CD, stacks & cloud. blog.gitguardian.com/owasp-top-10... #AppSec #DevSecOps

🔐 From “API keys in Git” to “agentic AI with scoped identities” — the next frontier of security is non‑human actors with strong attestation. #DevSecOps #CloudNative #CyberArk #SPIFFE #KubeCon blog.gitguardian.com/workload-ide...

Containers were the on‑ramp, not the destination.” At #KubeCon 2025 identity, governance & agent security stole the show. Microservices + AI = new risk surface. Read more: blog.gitguardian.com/kubecon-2025

🚨 Identity is the new perimeter. At #BSidesChicago 2025 we saw attackers moving through the cloud control‑plane like it’s tourist season — service principals & Kubernetes misconfigs are their playground. 🍿 Dive deeper: blog.gitguardian.com/bsides-chica... #DevSecOps #AppSec

At #TechnoSecurity West 2025, identity = perimeter. If your IAM is a maze, attackers have already found the exit. 🧩🔐 blog.gitguardian.com/techno-secur...

Human admins aren’t the only VIPs; service accounts and automation scripts need the spotlight too. 👀 Read how GitGuardian helps you widen the scope of PAM and kill secret sprawl for good. blog.gitguardian.com/working-towa... #AppSec #SecOps

🚀 At #INCYBERCanada 2025 in Montréal we heard loud & clear: compliance doesn’t cut it anymore—collaboration is the new security foundation. 🌐 Let’s govern machine identities, secure our global supply‑chains, and build resilience together. blog.gitguardian.com/incyber-foru...

Back to security basics at CornCon 11: Why resilience beats perfection The big takeaway: Embrace sustainable security programmes – don’t chase zero‑risk illusions, build something you can maintain. Read more: blog.gitguardian.com/corncon-11/

GitHub is doubling down: requiring WebAuthn, OIDC, and ultra-short tokens to harden npm publishing. These aren’t just npm rules — they’re lessons for all devs. 🔐 blog.gitguardian.com/security-les... #DevSecOps #SupplyChainSecurity

Who owns your API keys? Spoiler: probably not the person you think 😅 Stop playing hot potato with NHIs—focus on context, not blame. 👉 blog.gitguardian.com/defining-nhi... #OWASP #NHIs #MachineIdentities

BlueTeamCon 2025 taught us: perfection’s overrated; logs, pragmatic AI, and identity tweaks win. Who knew fixing cybersecurity could feel like adulting? 🕵️‍♂️🔍 Check it out: blog.gitguardian.com/blueteamcon-...

🚨 𝗕𝗥𝗘𝗔𝗞𝗜𝗡𝗚: 𝗚𝗶𝘁𝗚𝘂𝗮𝗿𝗱𝗶𝗮𝗻 𝗨𝗻𝗰𝗼𝘃𝗲𝗿𝘀 𝗠𝗮𝘀𝘀𝗶𝘃𝗲 𝗦𝘂𝗽𝗽𝗹𝘆 𝗖𝗵𝗮𝗶𝗻 𝗔𝘁𝘁𝗮𝗰𝗸 We've discovered a coordinated campaign we called "GhostAction", that compromised 817 #GitHub repositories across 327 users, 𝘀𝘁𝗲𝗮𝗹𝗶𝗻𝗴 𝟯,𝟯𝟮𝟱 𝘀𝗲𝗰𝗿𝗲𝘁𝘀 through malicious CI/CD workflows. blog.gitguardian.com/ghostaction-...

Overprivileged bots are the new insider threat 🤖💣 Most API tokens still have full access. Why? Because to many teams, breaking prod > breaking security. Time to rethink privilege and NHI governance. Full post 👉 blog.gitguardian.com/principle-of...

Following the recent breach, we've just published the complete playbook: how to build a #Salesforce secrets scanning pipeline using Salesforce CLI + GitGuardian's detection engine. Read our emergency response guide: lnkd.in/e78Jm586

Heads up Nx users, your credentials might have been leaked. Hear from GitGuardian's Cybersecurity Researcher on what he discovered when he dug into the recent Nx "s1ngularity" attack, affecting thousands of users. youtu.be/t3RSKws0en4 #Nx #s1ngularity #DevSecOps #SupplyChainAttack