About Cremit
Cremit builds tools to investigate exposed keys.
Find where a credential surfaced, check supported types for validity, review access context for AWS access keys or GCP API keys, and identify who can act.
Founded in
Seoul, 2023
Why this work matters
Finding a credential is only the beginning. A response needs its location, whether it still works, what access is associated with it, and someone who can replace or revoke it.
Cremit brings those clues together in a finding so a security team can decide what to investigate and hand off next.
In the product
The checks behind each finding
Keep the source attached
Show where a credential was found in a connected repository, storage location, document, or message.
Verify only what can be checked
Check supported credential types with their issuer. Mark other findings for manual review instead of calling them active.
Give the response an owner
Show available access context for AWS access keys and GCP API keys, then route the finding to a person. The customer rotates or revokes the key.