credential leak
Safeguard articles tagged "credential leak" — guides, analysis, and best practices for software supply chain and application security.
4 articles
GitGuardian vs TruffleHog: choosing a secrets detection tool in 2026
How GitGuardian and TruffleHog compare on detection accuracy, false positive handling, remediation workflow, and enterprise rollout for secrets scanning programs.
Python requests library proxy-auth credential leak (CVE-2023-32681)
CVE-2023-32681 lets Python's requests library leak Proxy-Authorization credentials to destination servers on HTTPS redirects. Here's the impact, timeline, and fix.
How to Run a Secret Scan Across Your Codebase
A secret scan finds hardcoded credentials, API keys, and tokens in your code and history before an attacker does. Here is how to scan, what to catch, and how to respond.
Unsecured API Keys: How They Leak and How to Lock Them Down
Unsecured API keys are one of the most common causes of breaches, usually leaking through committed code and misconfigured storage. Here is how they get exposed and how to stop it.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.