Skip to content

Risks

Risk Name Category Platforms Type
Consolidated risk for secret exposure Exposed Secret All platforms Secrets Scanning
Cleartext secret in configuration Exposed Secret AWSAzureGoogle Cloud Secrets Scanning
Cleartext secret exposed in CICD output Exposed Secret Azure DevOpsCI/CDGitHub Secrets Scanning
Cleartext secret exposed in collaboration platform Exposed Secret SlackJiraConfluenceMicrosoft TeamsSharePointCollaboration Secrets Scanning
Hardcoded secret in code commit Exposed Secret GitHubGitLabBitbucket Secrets Scanning
Correlated token exposure Exposed Secret All platforms Secrets Scanning
Exposed secrets goldmine Exposed Secret All platforms Secrets Scanning
The same secret is exposed in multiple locations - Legacy Exposed Secret All platforms Secrets Scanning
Secret revealed by human actor Abnormal Behavior AWSAzure Vault Security
Previously inactive token is active again Abnormal Behavior AWSAzure NHI
Previously disabled token has been reactivated Abnormal Behavior AWSAzure NHI
Production secret is fetched by script Abnormal Behavior AWSAzure Vault Security
Production secret is fetched by IDE client Abnormal Behavior AWSAzure Vault Security
Production token is used by IDE client Abnormal Behavior AWSAzure NHI
Idle identity fetched a secret Abnormal Behavior AWS Vault Security
Secret was fetched by non-privileged position Abnormal Behavior Vault Security
Secret/Token activity from restricted location Abnormal Behavior AWS Vault Security
Vault dump Abnormal Behavior AWSAzure Vault Security
NHI token used by multiple devices Abnormal Behavior AWSGoogle CloudNHI NHI
Failed Recon / Privilege Escalation attempt Abnormal Behavior AWS
ACL permissions over secret Principle of Least Privilege AWSAzureGoogle CloudKubernetes
Excessive unused token permissions Principle of Least Privilege AWSAzureGoogle Cloud
External accounts can read your secrets Principle of Least Privilege AWSAzureGoogle Cloud
Cross-account NHI Privilege Escalation point Principle of Least Privilege AWS
Secret fetched by a new workload Monitoring AWS
Overused secret Monitoring AWSAzureGoogle Cloud
Failed attempts to single/multiple secrets Monitoring
Former employees secret offboarding report Monitoring
Secret rotation Secret Hygiene AWSAzureGoogle CloudGitHubHashiCorp VaultKubernetes
Token rotation Secret Hygiene AWSAzureGoogle CloudGitHubNHI
Stale secret Secret Hygiene AWSAzureGoogle CloudGitHubHashiCorp VaultKubernetes
Stale token Secret Hygiene AWSAzureGoogle Cloud
Misplaced secrets Misconfiguration AWSAzureKubernetes
Former employee token is enabled Misconfiguration AWSAzureGoogle CloudGitHubNHI