Security First, Transparency Always: Inside GitGuardian's Responsible Disclosure Process

Short summary

GitGuardian's year-long responsible disclosure program demonstrates a widespread problem: 70% of corporate secrets leaked on GitHub remain valid years after exposure, creating substantial security risks. Direct engagement with security teams resolved 15 of 24 critical incidents involving database credentials, API keys, and artifact repositories. Organizations significantly improve remediation rates by publishing security.txt files, designating accessible security contacts, and responding promptly to disclosures.

• •70% of leaked corporate secrets remain valid years after exposure on public repositories
• •Direct outreach to security teams resolved 15 of 24 critical credential leaks (databases, artifact repos, cloud storage)
• •Faster remediation depends on published security.txt files and accessible incident response contacts within organizations

Generated with AI, which can make mistakes.