GitGuardian

More and more people shipping code on GitHub never trained as developers. @github’s Octoverse 2026: industry-linked public repos grew from ~9M in 2022 to 25M this year. Every new builder and agent adds API keys. We wrote about it:

RT @SapphireVC: Congrats to Eric Fourrier & the @GitGuardian team on the $50M Series C! 👏 As companies rely more on software & AI to run everyday operations, the number of non-human logins, such as service accounts & AI agents, has grown rapidly. GitGuardian is meeting this moment by pushing security deeper into the development workflow, helping teams catch exposed secrets early & manage access as systems scale. We’re proud to continue supporting GitGuardian as they grow globally & help enterprises protect the software that runs their business. Read more:

RT @alpic_ai: Introducing the sponsors making MCP Connect Day possible! 🥇 Gold: @daytonaio 🥈 Silver: @apify @blocks @datadoghq @gitguardian @linkup_platform Mirakl 🥉 Bronze: @awscloud @data_dome @dusthq @leboncointech @scaleway @theodo @workos Feb 5 in Paris 👉

RT @OWASPLondon: The next OWASP London Chapter in-person Meetup will take place on January 21st, 2026, kindly sponsored by @nuaware_tech with raffle prizes kindly sponsored by @GitGuardian and @Docker Register to attend this event here: 👇

RT @TradeTalks: .@GitGuardian @svrn_ai @orcasec @silverfort join @JillMalandrino on @Nasdaq #TradeTalks to discuss the cybersecurity challenges with operating non-human identities.

RT @EVOTEKhq: @GitGuardian recently announced its new channel partner program to scale non-human identity security. As a proud partner, we could not be more enthusiastic about this opportunity. @CesarEnciso69

RT @benrothke: As for the Shai-Hulud 2.0 npm worm, it gets worse over time. #ShaiHulud supply chain attack threat actors exfiltrated stolen credentials directly to #GitHub repositories created with compromised tokens. HT @guedou of @GitGuardian.

RT @OneRSAC: Security teams need to stop being the department of "no" and start being the department of "how." Hear more from @GitGuardian Developer Advocate Dwayne McDaniel in this RSAC Podcast.

RT @CharlieEriksen: Very cool analysis by @GitGuardian, adding extra insights into the run-up to the attack:

RT @SapphireVC: As cyber threats grow more sophisticated, organizations need innovative defenses to stay protected. That’s why we’re proud to see 3 of our portfolio companies recognized on @Fortune’s Cyber 60 list in the growth stage category. Congratulations to @GitGuardian, @HuntressLabs, & @cyera_io! 👏 Full list here:

Think your Artifactory token is safe in that Jenkinsfile? So did the last company... until their CI/CD pipeline became an attack vector. Read-only tokens can still write your downfall. #DevOps #Security

🔓 Artifactory tokens: the skeleton keys to your kingdom. Leaked one? Congrats, you just invited attackers to your production party. Read-only? More like read-everything. #SupplyChainSecurity #DevSecOps

🚢 15M Docker images scanned. 🔐 100K valid secrets found. 😱 7K+ active AWS keys exposed. 🏭 Fortune 500 companies affected. 🧪 Secrets in ENV, configs, layers. 🛡️ Time to scan your containers. Read more :

RT @manuelbissey: Secrets #scanning isn't just about monitoring code repositories like GitHub. The 2025 GitGuardian report reveals a surge in hardcoded #secrets, with 23.7M added in 2024. Critical exposures also occur in collaboration tools like Slack and Jira☝️🤖

🚨 NEW: Our State of Secrets Sprawl 2025 Report has dropped! We analyzed GitHub, Docker Hub, and even AI-assisted coding—the results will surprise you. Get the full report: #AppSec #CyberSecurity #SecretsManagement

Security isn’t just about tech—it’s about people. Kayssar Daher shares why building relationships in a company is just as critical as patching vulnerabilities. 🔑 🎧 Listen to the latest Security Repo Podcast! : #SecurityLeadership #DevSecOps #AppSec

🎙️ Time to properly meet your Security Repo Podcast co-host! The latest episode we get to know Kayssar Daher—his journey, security hot takes, and why he thinks security is just “housekeeping.” Listen now: #CyberSecurity #AppSec #DevSecOps

🔑 Git is powerful… and permanent. Many assume overwriting a commit removes secrets, but Git’s history is forever! At #WWHF #MileHigh2025, we discussed why rotation—not deletion—is the only safe fix for exposed credentials. Read more:

"Security teams can't be everywhere—but your devs can." 🎯 Security Champions help spread security knowledge! Learn how to start (and scale) a great program on the latest Security Repo Podcast! 🎙️ Listen here: #SecurityChampions #AppSec #DevSecOps

🚨 Leaked AWS keys aren’t fully revoked! At #WWHF #MileHigh2025, we learned that AWS’s CompromisedKeyQuarantine policy doesn’t prevent all actions—it’s not really a security feature. Rotate exposed secrets immediately! More insights: