GitGuardian helps enterprises close credential-based breach paths. It finds secrets wherever they live and prioritizes remediation. 🏆 #1 securityApp on GitHub.
The World
Joined April 2017
- Tweets6.5K
- Following571
- Followers6K
- Likes2.8K
28.6 million secrets leaked on public GitHub in 2025.
gitguardian.com/state-of-sec…
Binance’s initial investigation suggests a compromised DevOps engineer’s laptop may have been the way in.
Could YOU list the production credentials on your engineers’ laptops?
How to scope a laptop compromise: blog.gitguardian.com/blast-r…
More and more people shipping code on GitHub never trained as developers. @github’s Octoverse 2026: industry-linked public repos grew from ~9M in 2022 to 25M this year.
Every new builder and agent adds API keys. We wrote about it:
blog.gitguardian.com/github-…
GitGuardian retweeted
Congrats to Eric Fourrier & the @GitGuardian team on the $50M Series C! 👏
As companies rely more on software & AI to run everyday operations, the number of non-human logins, such as service accounts & AI agents, has grown rapidly. GitGuardian is meeting this moment by pushing security deeper into the development workflow, helping teams catch exposed secrets early & manage access as systems scale.
We’re proud to continue supporting GitGuardian as they grow globally & help enterprises protect the software that runs their business.
Read more: blog.gitguardian.com/series-…
GitGuardian retweeted
Introducing the sponsors making MCP Connect Day possible!
🥇 Gold: @daytonaio
🥈 Silver: @apify @blocks @datadoghq @gitguardian @linkup_platform Mirakl
🥉 Bronze: @awscloud @data_dome @dusthq @leboncointech @scaleway @theodo @workos
Feb 5 in Paris 👉 luma.com/bj6kgvxh
GitGuardian retweeted
The next OWASP London Chapter in-person Meetup will take place on January 21st, 2026, kindly sponsored by @nuaware_tech with raffle prizes kindly sponsored by @GitGuardian and @Docker
Register to attend this event here:
👇
meetup.com/owasp-london/even…
![OWASP London Chapter Meetup [IN-PERSON], Wed, Jan 21, 2026, 6:00 PM | Meetup](https://pbs.twimg.com/card_img/2118623762165743616/4qlG7Um9?format=jpg&name=600x314)
GitGuardian retweeted
.@GitGuardian @svrn_ai @orcasec @silverfort join @JillMalandrino on @Nasdaq #TradeTalks to discuss the cybersecurity challenges with operating non-human identities. nitter.gq/i/broadcasts/1lPKqvead…
GitGuardian retweeted
@GitGuardian recently announced its new channel partner program to scale non-human identity security. As a proud partner, we could not be more enthusiastic about this opportunity. @CesarEnciso69
GitGuardian retweeted
As for the Shai-Hulud 2.0 npm worm, it gets worse over time. #ShaiHulud supply chain attack threat actors exfiltrated stolen credentials directly to #GitHub repositories created with compromised tokens. HT @guedou of @GitGuardian. cybersec.gitguardian.com/s/s…
GitGuardian retweeted
Security teams need to stop being the department of "no" and start being the department of "how." Hear more from @GitGuardian Developer Advocate Dwayne McDaniel in this RSAC Podcast. spr.ly/60157m4mH
GitGuardian retweeted
Very cool analysis by @GitGuardian, adding extra insights into the run-up to the attack:
blog.gitguardian.com/shai-hu…
GitGuardian retweeted
As cyber threats grow more sophisticated, organizations need innovative defenses to stay protected.
That’s why we’re proud to see 3 of our portfolio companies recognized on @Fortune’s Cyber 60 list in the growth stage category. Congratulations to @GitGuardian, @HuntressLabs, & @cyera_io! 👏
Full list here: fortune.com/ranking/cyber/
Think your Artifactory token is safe in that Jenkinsfile?
So did the last company... until their CI/CD pipeline became an attack vector.
Read-only tokens can still write your downfall. devopsdigest.com/the-hidden-…
#DevOps #Security
🔓 Artifactory tokens: the skeleton keys to your kingdom.
Leaked one? Congrats, you just invited attackers to your production party.
Read-only? More like read-everything.
devopsdigest.com/the-hidden-…
#SupplyChainSecurity #DevSecOps
🚢 15M Docker images scanned.
🔐 100K valid secrets found.
😱 7K+ active AWS keys exposed.
🏭 Fortune 500 companies affected.
🧪 Secrets in ENV, configs, layers.
🛡️ Time to scan your containers.
Read more : s.gitguardian.com/eede3e
GitGuardian retweeted
Secrets #scanning isn't just about monitoring code repositories like GitHub. The 2025 GitGuardian report reveals a surge in hardcoded #secrets, with 23.7M added in 2024. Critical exposures also occur in collaboration tools like Slack and Jira☝️🤖
buff.ly/2lxxh6e
🚨 NEW: Our State of Secrets Sprawl 2025 Report has dropped!
We analyzed GitHub, Docker Hub, and even AI-assisted coding—the results will surprise you.
Get the full report: gitguardian.com/state-of-sec…
#AppSec #CyberSecurity #SecretsManagement
Security isn’t just about tech—it’s about people.
Kayssar Daher shares why building relationships in a company is just as critical as patching vulnerabilities. 🔑
🎧 Listen to the latest Security Repo Podcast! : youtu.be/qUEameZsDr4
#SecurityLeadership #DevSecOps #AppSec
🎙️ Time to properly meet your Security Repo Podcast co-host!
The latest episode we get to know Kayssar Daher—his journey, security hot takes, and why he thinks security is just “housekeeping.”
Listen now:
youtu.be/qUEameZsDr4
#CyberSecurity #AppSec #DevSecOps
🔑 Git is powerful… and permanent. Many assume overwriting a commit removes secrets, but Git’s history is forever!
At #WWHF #MileHigh2025, we discussed why rotation—not deletion—is the only safe fix for exposed credentials.
Read more: c.gitguardian.com/wwhfmh
