secret-scanning
13 posts on this topic. For the full archive, see the security blog. Comparison writes-ups live on Why Puaro and the methodology page.
Regex Finds Candidates. AI Decides What's Noise.
We ran Gitleaks, TruffleHog, GitGuardian, and Puaro on four open-source repos. Puaro's AI suppressed 334 candidate findings and left 33 real alerts for humans.
Source Code Secret Leaks Cost $5.47 Million Per Incident: Here Is the Breakdown
When developers leave live API keys, AWS tokens, or database credentials in a repository, attackers do not need to break in: they log in. Industry estimates put the average cost of a single secret leak at $5.47 million in 2026. Here is where that money goes.
Half a Million Lines, One Public Package: Lessons from the Anthropic Claude Leak
News reports describe how a source map file inside a public npm package may have exposed over half a million lines of Claude Code CLI source. Here is a plain-English look at what went wrong and what actually needs checking before you publish.
We Tested 4 Secret Scanners on 8 Real Repos. The Results Were Eye-Opening.
We scanned 2.2 million lines of code across 8 popular open-source repositories using Gitleaks, TruffleHog, GitGuardian, and Puaro. Here are the raw numbers and what they actually mean.
Puaro vs Gitleaks vs TruffleHog: Which Secret Scanner Fits Your Workflow?
A practical comparison of three secret scanning tools (regex speed, deep verification, and AI-powered classification) to help you choose the right fit for your team.
How AI-Powered Scanning Prevents the Next 'GlassWorm' Supply Chain Attack
The recent GlassWorm incident exposed critical vulnerabilities in the software supply chain when developers accidentally leaked VS Code extension tokens. Learn how AI-powered scanning provides proactive prevention beyond simple pattern matching.
Secret Scanning Is Becoming a $12 Billion Market by 2033
The source code secret scanning market is projected to reach up to $12 billion by 2033, and AI-powered detection tools are already hitting 97% accuracy in identifying real threats.
The GhostAction Attack: How 3,300+ Secrets Were Stolen from GitHub Repositories
A large-scale campaign abused GitHub Actions to exfiltrate 3,325 secrets from 817 repositories and 327 users. Learn how it worked and how to secure CI/CD pipelines.
How Human Error Leads to Leaked Secrets and Data Breaches
Git commits, hardcoded API keys, and debug logs are common ways developers accidentally expose secrets and sensitive data. This post covers real incidents caused by these mistakes and practical ways to prevent them.
The True Cost of Data Breaches
Learn from Marriott's $52 million data breach settlement how proactive secret scanning tools like Puaro can protect your organization from devastating security breaches, safeguard customer data, and prevent the astronomical costs of credential exposure in today's cyber threat landscape.
How AI and ML Improve Secret Detection Accuracy and Reduce False Positives
AI and machine learning models can adapt to new secret patterns and read surrounding code for context, cutting false positive rates from around 25-30% with traditional regex scanning to 3-7% with AI/ML-enhanced scanning.
How Puaro Catches Exposed Secrets in Your Code Before They Cause a Breach
Puaro's AI-driven scanner catches secrets before they leak, addressing the human error responsible for 85% of data breaches, and can cut security costs by up to 60%.
How Automated Code Scanning Prevents Secret Leakage
Puaro's code scanner automatically scans code for exposed secrets, flags vulnerabilities during development, monitors repositories continuously, and helps teams meet compliance requirements.