Mar 18, 2024
DevSecOps starts with a credential your team can actually fix
A practical rollout for credential detection across repositories and collaboration tools, with clear owners and honest scan timing.
Ben Kim
Mar 4, 2024
Customer Interview: Insights from ENlighten
A conversation with the team at ENlighten, a Korean energy IT platform, about how they manage credentials and secrets and what led them to Cremit.
Ben Kim
Feb 26, 2024
What is secret detection? From pattern match to response
Secret detection finds possible credentials in content a tool actually inspects. Learn what a match proves, where scans run, and how to verify and contain an exposed key.
Ben Kim
Oct 23, 2023
Microsoft’s exposed SAS URL: what one repository link opened
A public model download URL carried an Azure SAS token that reached other storage data. Microsoft and Wiz show why finding a URL, reviewing its scope, and investigating access are separate steps.
Ben Kim
Oct 22, 2023
Secret sprawl and workload identity sprawl: two different lists
One credential can be copied to many places; many workload principals can accumulate grants. Keep separate records, then join the evidence for each investigation.
Ben Kim
Don't miss the next one
A short monthly brief on credential security from Cremit.