PhishRoot / Products
Secrets
Yuna Kim · Security Researcher
PhishRoot Secrets
Transcript
PhishRoot Secrets checks your code for possible credentials, right on your device. If a match is real, rotate it.
Yuna Kim · Security Researcher
Secrets walkthrough
Transcript
PhishRoot Secrets checks your code for possible credentials, right on your device. If a match is real, rotate it. This is PhishRoot Secrets. Everything shown here is a synthetic, fake example. No real code, credentials, or customer data. Select Demo to scan a synthetic GitHub token. The preview shows the detector, the line number, and a recommendation. Demo results aren't saved. Or paste code into Code to scan, and select Scan code. Three fake patterns are flagged: an AWS key ID on line two, a GitHub token on line three, and a private key header on line four. Choose file scans a local file, like this synthetic dot-env: a Slack token on line two, and a credential assignment on line three. Raw code and credential values are never uploaded or saved. Local patterns don't validate secrets, so if a match is real, revoke or rotate it. Signed in, Save to organization stores sanitized evidence and findings, never raw source. We're signed out here, so nothing is saved. The off-camera narration uses a different synthetic voice from the presenter.
Scan code
Assets
0
Open
0
Resolved
0
No findings.