# Managing Exposed Credentials

The Exposed Credentials page gives users a single filterable view of all secret-bearing credentials that have been found exposed in plain text across your environment. These exposed credentials, discovered by Agentic Fabric sources, are displayed along with their metadata, including owners, status, location, and source. Supported credential types include credentials, such as IAM access keys, personal access tokens, fine-grained tokens, app registration client secrets, SAML certificates, service account keys, and API keys.

## Viewing the Exposed Credentials Inventory

You can view the exposed credentials that have been discovered in the exposed credentials inventory.

**To view exposed credentials:**

1. Go to **Agentic Fabric**.

2. From the navigation menu, go to the **Non-Human Identities** section and select **Exposed Credentials**.

Select metrics within the quick filters on the **Exposed Credentials** page to refine the exposed credentials listed in the table.

You can view the exposure breakdown for the week, the exposures by severity, and the exposures by location. On the **Total Exposed** quick filter, you can hover over the line graph to view the agent count by month. On the **Exposure Breakdown**, **High Severity**, and **Top Exposure Locations** quick filters, you can select the metrics to show relevant results in the table.

Additional filtering can be applied by selecting **+ Advanced**. Select **Clear** to clear all configured filters.

**To perform bulk actions:**

1. Select the checkbox for each row or the top checkbox to select all rows.

2. Select the **Bulk Action** icon <img src="../img/bulk-action.svg" class="img-fluid" style="width:3%" alt=""> and choose the action to apply to the selected risks. You can choose **Revalidate**, **Mark As Not A secret**, **Mark As True Secret**, **Add tags**, or **Change Employee**.

You can use the **Export** icon <img src="../img/export.svg" class="img-fluid" style="width:3%" alt=""> to export the results or selected credentials to a CSV file.

In the **Exposed** tab, you can review the following information about each exposed credential:

- **Severity**: The risk severity of the credential's exposure.

- **Type**: The type of credential that has been exposed.

- **Exposed at**: Where the credential has been exposed.

- **Exposure time**: How long the credential has been exposed.

In the **Playground** tab, you can review low-confidence findings, such as the portion of a secret that does not enable access or secrets that have been disabled.

!!! note
        
    This tab is experimental and is mainly used for exporting compliance reports.

## Viewing Exposed Credential Details

You can access an exposed credential’s details page to view additional data about the exposed credential, including its attributes, exposed location, and the timeline.

**To access the exposed credential details page:**

1. Go to **Agentic Fabric**.

2. From the navigation menu, go to the **Non-Human Identities** section and select **Exposed Credentials**.

3. Find and select an exposed credential to view its details page.

From this page, you can perform the following actions:

- In the **Overview** tab:
        - View and copy ![](../img/clipboard.png#icon) the credential's attributes.
        - Review details about the location where the credential is exposed in the **Exposed Location** card. 
        - Review the details and risk level of any found risks associated with the credential in the **Risks** card.
        - View additional secret details on the **Secret Enrichment** card.
        - View the owners of the credential in the **Owners** card.
    - Review a timeline of the changes made to the exposed credential in the **Timeline** tab.
    - Copy the link to the credential or revalidate the credential by selecting the **Actions** menu in the upper-right corner of the page.

Managing Exposed Credentials

The Exposed Credentials page gives users a single filterable view of all secret-bearing credentials that have been found exposed in plain text across your environment. These exposed credentials, discovered by Agentic Fabric sources, are displayed along with their metadata, including owners, status, location, and source. Supported credential types include credentials, such as IAM access keys, personal access tokens, fine-grained tokens, app registration client secrets, SAML certificates, service account keys, and API keys.

Viewing the Exposed Credentials Inventory

You can view the exposed credentials that have been discovered in the exposed credentials inventory.

To view exposed credentials:

Go to Agentic Fabric.
From the navigation menu, go to the Non-Human Identities section and select Exposed Credentials.

Select metrics within the quick filters on the Exposed Credentials page to refine the exposed credentials listed in the table.

You can view the exposure breakdown for the week, the exposures by severity, and the exposures by location. On the Total Exposed quick filter, you can hover over the line graph to view the agent count by month. On the Exposure Breakdown, High Severity, and Top Exposure Locations quick filters, you can select the metrics to show relevant results in the table.

Additional filtering can be applied by selecting + Advanced. Select Clear to clear all configured filters.

To perform bulk actions:

Select the checkbox for each row or the top checkbox to select all rows.
Select the Bulk Action icon and choose the action to apply to the selected risks. You can choose Revalidate, Mark As Not A secret, Mark As True Secret, Add tags, or Change Employee.

You can use the Export icon to export the results or selected credentials to a CSV file.

In the Exposed tab, you can review the following information about each exposed credential:

Severity: The risk severity of the credential's exposure.
Type: The type of credential that has been exposed.
Exposed at: Where the credential has been exposed.
Exposure time: How long the credential has been exposed.

In the Playground tab, you can review low-confidence findings, such as the portion of a secret that does not enable access or secrets that have been disabled.

Note

This tab is experimental and is mainly used for exporting compliance reports.

Viewing Exposed Credential Details

You can access an exposed credential’s details page to view additional data about the exposed credential, including its attributes, exposed location, and the timeline.

To access the exposed credential details page:

Go to Agentic Fabric.
From the navigation menu, go to the Non-Human Identities section and select Exposed Credentials.
Find and select an exposed credential to view its details page.

From this page, you can perform the following actions:
- In the Overview tab:
  - View and copy the credential's attributes.
  - Review details about the location where the credential is exposed in the Exposed Location card.
  - Review the details and risk level of any found risks associated with the credential in the Risks card.
  - View additional secret details on the Secret Enrichment card.
  - View the owners of the credential in the Owners card.
- Review a timeline of the changes made to the exposed credential in the Timeline tab.
- Copy the link to the credential or revalidate the credential by selecting the Actions menu in the upper-right corner of the page.

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.