A historical scan can surface hundreds or thousands of incidents at once. GitGuardian's incident table is built to answer what to work on first: verified validity, automated severity scoring across 24 rule sets, and saved filtered views. youtu.be/Fhj83rW1lOQ

Prioritizing Your GitGuardian Incidents

YouTube video by GitGuardian

youtu.be

ggshield can plant honey tokens directly from your terminal. Decoy AWS keys that look real, grant no access, and alert you the moment someone tries to use them. Trip wires for your codebase. youtu.be/UsLGa44CugM

Honeytokens with ggshield: plant tripwires that alert on secret use

YouTube video by GitGuardian

youtu.be

GitGuardian now scans Gerrit. Full historical scan on connect, real-time scanning on every new commit and comment. Findings land in the same dashboard as your GitHub, GitLab, and Bitbucket incidents. youtu.be/q1XzY6HvxAI

Secrets Are Hiding in Your Gerrit Code Reviews — Here's How to Find Them

YouTube video by GitGuardian

youtu.be

AI coding assistants read files, run commands, and call tools. ggshield AI hooks scan at each of those points and block secrets before they reach prompts, logs, or generated code. One install command. Works with Cursor, Claude Code, and Copilot. youtu.be/he0Ynu32puQ

Stop Cursor, Claude Code & GitHub Copilot From Leaking Secrets With ggshield AI Hooks

YouTube video by GitGuardian

youtu.be

GitGuardian's updated search bar lets you triage incidents by pasting a secret value, typing an author email, a file path, or plain language like "open critical unassigned cloud incidents." Available now on every plan. youtu.be/LSrBUCvJaLM

GitGuardian’s Smarter Search Bar Makes Incident Triage Faster

YouTube video by GitGuardian

youtu.be

When a breach happens, you need to account for every secret: which were in CI, which were on developer laptops, which processes had access. That inventory is what you show your board. youtube.com/shorts/EOrZm...

You need to put secret analysis into your forensic investigation and your remediation process

YouTube video by GitGuardian

youtube.com

When an LLM hits a security constraint, GitGuardian research shows it often goes around it, silently, and hardcodes the secret. The developer didn't make that call. The model did. youtube.com/shorts/999wS...

LLMs go around that security constraint and hardcode secrets

YouTube video by GitGuardian

youtube.com

GitGuardian's VS Code extension now shows all secret findings in a sidebar panel — across every file, before you commit. Works in Cursor and Windsurf too. Catch it on save, not in CI. youtu.be/d18uYyOhez8

GitGuardian's VS Code Extension Just Made It Even Easier To Fight Secrets Sprawl

YouTube video by GitGuardian

youtu.be

One stolen PAT in February. Trivy poisoned March 19. Eight days later: Aqua, Checkmarx, LiteLLM, and Telnyx all compromised because they automatically consumed the update. This is what supply chain cascade looks like. youtube.com/shorts/qa-47...

From Trivy to Telnex...A malware in the supply chain timeline

YouTube video by GitGuardian

youtube.com

ggshield 1.51: AI hooks now cover Codex alongside #Claude, #ChatGPT, and #Cursor. #MCP server discovery extended to plugin-installed servers. Plus oob (out-of-band) auth, better SLSA provenance, and improved API status. youtu.be/RCIeYF3nkn0

New in ggshield 1.51: Codex Hooks, MCP Discovery, and SLSA Provenance

YouTube video by GitGuardian

youtu.be

Claude Code co-authored commits leak secrets at 2.4× the human baseline. Larger commits, more lines, more exposure surface. AI speeds up development — and quietly expands the attack surface. youtube.com/shorts/9jEDl...

Claude Code Co-authored Commits Leak Secrets At 2× The Baseline

YouTube video by GitGuardian

youtube.com

Claude Code co-authored commits leak secrets at 2.4× the human baseline. Larger commits, more lines, more exposure surface. AI speeds up development — and quietly expands the attack surface. youtube.com/shorts/9jEDl...

Claude Code Co-authored Commits Leak Secrets At 2× The Baseline

YouTube video by GitGuardian

youtube.com

A CISA contractor pushed AWS GovCloud admin keys to a public GitHub repo in November. It sat there for 6 months, after GitGuardian sent 7–10 alerts. No response. Guillaume Valadon walks us through how we escalated this disclosure: youtu.be/mWIgasN3K7Q

An inside look at finding Leaked CISA AWS GovCloud Admin Keys on Github

YouTube video by GitGuardian

youtu.be

Exploiting a vulnerability targets production. Malware targets the developer. That's not a subtle difference: it's where the credentials live: youtube.com/shorts/2-9e4...

Malware is created by criminals

YouTube video by GitGuardian

youtube.com

75,000 open incidents is normal for GitGuardian customers. A "generic IAM copy" enriched to "Microsoft credential, publicly leaked" = risk score 100. That's ML-powered triage in practice: youtu.be/iyKHvK3g9g8

Stop Drowning in Security Alerts — ML-Powered Incident Scoring Finds What Actually Matters

YouTube video by GitGuardian

youtu.be

After a developer machine compromise: what secrets were exposed, where, and what needs rotation now? GitGuardian Developer Endpoint Protection scans your fleet via MDM and answers all three: youtu.be/IDzSiJQCZZA

What Secrets Are on Your Developer Laptops? GitGuardian Developer Endpoint Protection Can Tell You

YouTube video by GitGuardian

youtu.be

Every time a developer pushes a secret to public GitHub, GitGuardian emails them directly. That's the Good Samaritan program. Millions of alerts sent per year: youtube.com/shorts/dUzjI...

GitGuardian's Good Samaritan Program Alerts Millions Of Devs Per Year About Leaked Secrets

YouTube video by GitGuardian

youtube.com

Gerrit is one of the most widely deployed code review platforms in enterprise environments, yet a blind spot for secrets detection. GitGuardian now scans it, historically and in real time: youtu.be/q1XzY6HvxAI

Secrets Are Hiding in Your Gerrit Code Reviews — Here's How to Find Them

YouTube video by GitGuardian

youtu.be

.env files are plain text secrets on a machine that's a supply chain target. ggshield 1.50 moves API tokens to your OS credential store by default and extends AI hooks to the MCP layer. Full breakdown: youtu.be/4c983T8hAyc

Why Storing Secrets in .env Files Is a Supply Chain Risk — And How ggshield 1.50 Fixes It

YouTube video by GitGuardian

youtu.be

Cmd+K from anywhere in GitGuardian and jump to incidents, settings, integrations, or docs without leaving your workspace. Context-aware, role-scoped. Small thing, saves real time mid-incident: youtu.be/Jx-RpuMX7ak

Cmd+K for Security: Navigate GitGuardian at the Speed of Thought

YouTube video by GitGuardian

youtu.be

Ask GitGuardian "what are my top 10 public incidents right now?" and it answers. Natural language triage against all your incidents, in-app. Same 23 tools as the MCP server. Full demo: youtu.be/AqVPvAjkGR0

Meet GitGuardian's AI Assistant: Natural Language Queries Across All Your Incidents

YouTube video by GitGuardian

youtu.be

New Episode • Built Fast, Broken Faster: MCP & AI App Security—with GitGuardian’s Gaetan Ferry https://trustory.fm/cybersentries/built-fast-broken-faster-mcp-ai-app-security-with-gitguardians-gaetan-ferry/

90B events/day and we’re still manually doing L1 triage? That’s not resilience, that’s ✨tradition✨. #ChiBrrCon 2026 takeaway: automate the repetitive, keep humans for judgment, and build real inventories. #AppSec #AI blog.gitguardian.com/chibrrcon-20...

AI Is Making Security More Agile: Highlights from ChiBrrCon 2026

ChiBrrCon 2026 tackled AI, resilience, and operational agility in enterprise security. Learn what top speakers shared on SOC modernization and architectural risk.

blog.gitguardian.com

Why prevention-first secrets security will define enterprise scale: Learnings from a leading telecom 📖 Read more: www.helpnetsecurity.com/2026/01/28/g... #cybersecurity #cybersecuritynews #telecommunications #remediation @gitguardian.com

Why prevention-first secrets security will define enterprise scale: Learnings from a leading telecom - Help Net Security

GitGuardian enables prevention-first security by stopping secrets before Git commits, reducing leaks and helping teams scale safer.

helpnetsecurity.com

Cheat Sheet Alert! "How To Use ggshield To Avoid Hardcoded Secrets" by Dwayne McDaniel from @gitguardian.com December 10, 2025. GitGuardian's ggshield can help you quickly find any secrets in your repos, local files, archives, and commits. cybersec.gitguardian.com/s/how-to-use...

🤖 Agents don’t log in. They act. At #NHIcon 2026 the message was clear: human-centric IAM breaks in the age of agentic AI. Static roles + long-lived creds = 🚨 risk amplification. Time for identity at the speed of autonomy. 🔐 blog.gitguardian.com/nhicon-2026

Agentic AI and Non‑Human Identities Demand a Paradigm Shift In Security: Lessons from NHIcon 2026

In the race to innovate, software has repeatedly reinvented how we define identity, trust, and access. In the 1990's, the web made every server a perimeter. In the 2010's, the cloud made every identit...

blog.gitguardian.com

Secrets sprawl ≠ developer mistakes. It’s unmanaged machine access at scale. Boards care about downtime, cost, and resilience, and NHIs sit right in the middle. Here’s how to connect the dots 👇 blog.gitguardian.com/boards-focus...

Boards Focus On Risk, Resilience, and Operational Realities: Where NHI Governance Fits In

Learn how GitGuardian helps boards and CISOs align on cyber risk, operational resilience, and the rising impact of unmanaged workload identities at scale.

blog.gitguardian.com

AI agents aren’t your coworkers. They’re over-permissioned bots with access to prod. Stop pretending they’re cute. Start treating them like risks. 🛑 NHI governance now! blog.gitguardian.com/what-ai-agen...

What AI Agents Can Teach Us About NHI Governance

Agentic AI is a stress test for non-human identity governance. Discover how and why identity, trust, and access control must evolve to keep automation safe.

blog.gitguardian.com

AI agents are already causing incidents, and identity controls aren’t ready. Jan 27: Join GitGuardian at #NHIcon2026. Talk: “How Agentic AI Helps You Leak Secrets (and What to Do About It)” (1 PM PST, Builders Track) w/ @mdwayne-real.bsky.social Free registration here: aembit.io/nhicon?aff=G...

NHIcon 2026 by Aembit | Jan. 27

Agentic software is moving fast. NHIcon 2026 is one-day virtual experience for platform and security pros tackling AI and non-human identity challenges.

aembit.io

The next OWASP London Chapter in-person Meetup will take place on January 21st, 2026, kindly sponsored by @nuaware_tech with raffle prizes kindly sponsored by @GitGuardian and @Docker Register to attend this event here: 👇

OWASP London Chapter Meetup [IN-PERSON], Wed, Jan 21, 2026, 6:00 PM | Meetup

**This event is kindly sponsored by Nuaware.** **Raffle prizes are kindly sponsored by GitGuardian and Docker.** **There is limited seating available for in-person attende

meetup.com