I will find leaked secrets on public github repositories

Are your developers posting sensitive data like API Keys, Database Connection Strings, and SSH Keys to public GitHub repositories? What about on their private GitHub accounts or Stack Overflow?

Many prominent breaches in the last decade were caused by sensitive data, usually access tokens, being leaked by engineers unintentionally on public resources. This is especially true when the organization relies on outside consultants for any portion of their development.

I will use a combination of custom-built automation and manual techniques to search for leaked secrets related to your company's application/infrastructure in public GitHub Repositories.

Once complete, the client will receive a report that outlines any notable findings that could have a negative impact on the company's security posture. URL's will also be provided so the client can conduct further research on their own and validate the results.