In this webinar, we are joined by C.J May, Senior Security Analyst, to discuss: Common (security) mistakes when setting up GitHub Actions, How GitHub Actions workflows can be exploited in practice, and Best practices to harden your CI workflows on GitHub Actions
Join our next webinar with Aurélien Gâteau, Senior Software Engineer at GitGuardian, and Mackenzie Jackson, Developer Advocate at GitGuardian, to learn how to use ggshield, the open-source CLI that detects more than %ndet%+ types of secrets.
This time, learn how to detect compromised developer and DevOps environments with #CanaryTokens. Eric Fourrier will present GitGuardian's latest project, #ggcanary, a scalable approach to ensnaring attackers with AWS canary tokens and Terraform.
In this webinar hosted by Mackenzie Jackson, you will learn about the challenges of securely managing and distributing secrets in the SDLC and understand that successful secrets management is a combination of education, tooling and process.
Apprenez-en plus sur la surface d’attaque induite par GitHub et le problème des secrets. Rencontrez experts et pairs autour d’un apéritif.
DeveloperWeek Enterprise Conference (All Virtual) invites over 3,000 enterprise dev professionals to converge for a 2-day virtual conference & expo, featuring technology innovations and trends that corporations need to know about. One of these topics is being covered by Dwayne McDaniel, covering "Developing for the Web Without Leaving the Browser".
Join us on Thursday, November 30, for a live discussion with Ryan Blunden, Developer Advocate at Doppler, and Dwayne McDaniel, DevAdvocate of GitGuardian. Together, we will cover:The challenges of securely managing and distributing secrets in DevOps environments.
Learn from renowned security experts from around the globe on how to protect your business from cyber attacks during this one day event hosted at the Radisson Hotel in San Francisco. And come say hi to our team attending, consisting of Dwayne McDaniel and Daniel Walsh!
Infrastructure-as-Code (IaC) has become the go-to way for developers, SREs, and platform engineers to automate deployments and replicate environments. But with this increased automation comes an increased risk of misconfigurations. In this webinar, we will discuss the importance of Infrastructure-as-Code and its security implications. We will explore network, data, and permissions best practices for IaC security and learn how to harden IaC templates with GitGuardian’s CLI, ggshield!
Learn from renowned security experts from around the nation on how to protect your business from cyber attacks during this Owasp Colorado Chapter event. And come say hi to our developer advocate Dwayne McDaniel.
ICCWS uniquely addresses cyber security, cyber warfare and information warfare.
For the past 18 years ICCWS has developed into an important conference in the cyber-security field, attracting academics, military professionals and practitioners from around the world. With our own Dwayne McDaniel having the chance to present two sessions at this in person conference.
Learn from renowned security experts from around the globe on how to protect your business from cyber attacks during this one day event hosted at the Hilton Hotel in Miami. And come say hi to our team attending, consisting of Dwayne McDaniel and Aymeric Sicard!
IT & CYBERSECURITY MEETINGS is an event conducive to meetings and exchanges, with the aim of being a real business accelerator for your cybersecurity activity. With our French team being happy to be part of this event in Cannes, France.
In 2022, we scanned a staggering 1.027 billion GitHub commits! How many secrets do you think we found?
For the 3rd year in a row, I am excited to share with you the findings of The State of Secrets Sprawl! This report from my team at GitGuardian is the most extensive analysis of secrets exposed in GitHub and beyond!
Join Mackenzie Jackson, Security Advocate, Eric Fourrier, co-founder of GitGuardian, and Mark Turnage, CEO of DarkOwl, for this exclusive webinar; to discuss the most significant trends observed in 2022 and what to make of them for the future of developer security.
Sign up below!
BSidesSF is an Information / Security conference that’s different. It is a 100% volunteer-organized event, put on by and for the community, that truly strives to keep information easily accessible. And GitGuardian is ecstatic to be sponsoring this event and having Dwayne McDaniel and Mackenzie Jackson present!
Learn from renowned security experts from around the globe on how to protect your business from cyber attacks during this one day event hosted at the Sheraton Hotel in Dallas. And come say hi to our team attending, consisting of Dwayne McDaniel and Matthew Schimke.
Nordic IT Security cyber security forum has been around for 15 years now, acting as a steering wheel for navigation through the Nordic’s “cybersecurity watch-out” scheme, with its notable speakers and partners. And this year will include GitGuardian as a key sponsor.
Join Fastly and GitGuardian tech and security experts to discover the latest tools and techniques for building secure and resilient APIs. Fastly will provide insights into securing APIs and defending against cloud workload threats. Meanwhile, GitGuardian will guide you on shrinking the attack surface of your APIs with automated secrets detection.
OWASP Chapters from the Pacific Northwest join forces to put together a conference focused on Application Security. Experts from across the Pacific Northwest come together for a full day of learning, and our own Dwayne McDaniel will be there to present!
Get the security expertise you need right now. AWS re:Inforce is a security learning conference featuring AWS experts and industry-leading customers. Hear from AWS leaders and AWS Security Competency Partners including CrowdStrike, Datadog, Palo Alto Networks, Snyk, and Wiz.
GitGuardian will speak at Snyk's booth on June 13 at 5 pm PDT.
Infosecurity Europe keeps you connected with everyone in information security. The brightest minds, from engineers to innovators. We keep you up to date on everything about information security. From the past battles we’ve won to the present. Join us as we rethink the power of infosecurity and discover what that may mean to you.
Get ready for 24 hours of non-stop DevSecOps action at DevSecCon24! This free virtual event brings together experts and practitioners from the DevOps, development, and security communities for a full day of learning, networking, and collaboration. Discover and define the best practices, processes, and tooling that make secure software possible.
Join us at CodeSecDays virtual, where experts will share their insights on the present and future of software supply chain security. Expect our speakers to cover a range of topics such as software signing, open-source security, secrets management, and much more! You don’t want to miss out!
XChange Security brings solution providers and vendors together to develop solid partnerships and discover what’s new among security-focused business leaders. Engage with some of the most innovative leaders to learn how they utilize the latest technologies to combat internal and external threats.
Dwayne McDaniel, GitGuardian's Developer Advocate will give a talk: Who Goes There? Actively Detecting Intruders With Honeytokens on Friday, July 21 at 1PM EDT - Room Lancaster 1.
Software is everywhere, and Application Security vulnerabilities are lurking around every corner making the software attack surface attractive for abuse. If you are just an AppSec n00b or launch deserialization attacks for fun and profit, you will find something to tickle your interest at the AppSec Village.
BSides events combine security expertise from a variety of platforms in search of the “next big thing” in information security.
The Eighth Annual Chicago Cyber Security Summit connects C-Suite & Senior Executives responsible for protecting their companies’ critical infrastructures with innovative solution providers and renowned information security experts.
BalCCon is a non commercial, community organized event, with talks and workshops by the community for the community. Mackenzie Jackson, GitGuardian's will give a talk about Software Supply Chain Security.
DevOpsDays Boise is coming back to Boise in September 2023! Join Dwayne's talk: Scaling Security: What Shifting Left Was Supposed To Mean.
Over 120 speakers, briefings, workshops, labs, villages, contests & more! Join Dwayne's talk:
Stop Committing Your Secrets - Git Hooks To The Rescue September 30 - Room G - 10:00 AM - 12:00 PM (CDT)
Join Mackenzie Jackson as he unravels the mystery of "Exposed Credentials" in source code. Learn how attackers exploit leaked secrets and protect your digital assets. Don't miss out! The talk will be at 16.30.
Join Dwayne McDaniel's talk on "Offloading Tribal Knowledge Through Notebooks" at 13:15 EDT. Discover how to enhance incident response with automation and elevate your knowledge base using Jupyter Notebooks. Say goodbye to manual errors and missed steps!
Join Mackenzie Jackson's at CYBER CON 23, the Bristol & Bath Cyber Conference where he will give a workshop on how Honey Tokens work.
Join Dwayne McDaniel's talk on "Who Goes There? Actively Detecting Intruders With Cyber Deception Tools" on 14th October, 09:30 EDT in Room 401. Dive into the world of honeytokens and learn how to set strategic traps for cyber intruders. Protect your environment with Dwayne's expert insights!
Join us on October 18th for food, drinks, networking and an exciting and timely presentation on "Will it Blend? Questions to ask your Application Security Vendor". Networking with your peers starts at 5 - food is served at 5:30 and the presentation starts at 6.
Join Dwayne McDaniel at 4:10 EDT for 'Who Goes There? Actively Detecting Intruders With Cyber Deception Tools'. Dive into the world of Honeytokens and learn real-time attacker trapping techniques!
Le prochain meetup aura lieu en physique. Nous serons accueilli par notre sponsor GitGuardian que nous remercions chaleureusement de leur soutien.
OWASP Paris est le meetup dédié à la sécurité applicative. Pour rappel, le meetup se veut non commercial. Il réunit toutes personnes désireuses de concevoir et maintenir des logiciels plus sûrs. Si vous êtes intéressé par le sujet, que vous soyez débutant ou expert, n'hésitez pas à nous rejoindre pour partager vos expériences ou vos problématiques.
Join us on October 26 at 11:00am PDT for the talk: 'Do you know where your secrets are? Exploring the problem of secret sprawl and secret management'. Uncover the escalating issue of hardcoded credentials, learn from major breaches, and strategize your organization's secret management.
Hey Vienna! join Mackenzie on DeepSec Austria! He will give a talk: The Attackers Guide to Exploring Secrets in the Universe. See you there!
The Pyladies are a group of women enthusiastic about learning and sharing our love for Python in a welcoming environment.
An important group in the cybersecurity community and GitGuardian is ecstatic to host them in our offices.
We understand the struggle of securing sensitive data—API tokens, cloud credentials, and database URLs have a knack for slipping into the public eye, be it in code repositories, CI job logs, or unexpected corners like Jira tickets.
GitGuardian has been championing this cause since 2017, scouring over a billion public GitHub commits last year alone and uncovering a staggering 10 million in 2022. We've gone beyond reports, beyond thought leadership, to unveil a real solution: HasMySecretLeaked!
HasMySecretLeaked will change the way you secure secrets. No scanning—just auditability for every secret across vaults, pipelines, and more, to pinpoint leaks and their origins. If you’re wondering if your secrets have slipped into the wild, far beyond your control, HasMySecretLeaked has the answers. Join our experts as they delve into this transformative integration, flipping secrets security on its head.
Hosted by Mackenzie Jackson, Security Advocate at GitGuardian, this webinar will navigate through the pivotal features and showcase how this integration improves your secrets security posture. Don't miss this chance to enhance your secrets management practices and interact with industry experts!
SecatScale is a private community dedicated to the cyber security of tech organizations.
They connect cyber security leaders coming from high potential companies, and foster innovation. With free knowledge sharing to reinvent security in a modern world.
Learn the ins and outs of keeping your API’s secure.
Join Dwayne in Chicago at ChiBrrCon! He will present: Stand Up Straight - Security Posture And You
Join Dwayne McDaniel on Tuesday at 4:00 pm for an insightful talk on app security at Legends Room. Enhance your coding skills and ensure your apps stay rock-solid!
#AppSecurity #TechTalk
Join us on Feb 26th for food, drinks, networking and an exciting and timely presentation on "The attacker's guide to exploiting secrets". Networking with your peers starts at 5 - food is served at 5:30 and the presentation starts at 6.
Learn all about our partnership with Cyberark
Dive into the world of AI security with Mackenzie Jackson! Join us at 9:15 am for "The AI Survival Guide: Practical advice for stressed-out security workers." Gain valuable insights to tackle the challenges!
The Americna SpringSummit will bring together hundreds of experts and leaders from the financial sector across the US for three days of learning, information sharing, and networking. Come to the Summit to say hi to the GitGuardian staff present at the event!
Join us on 6-7 March 2024 at ExCeL London for an unparalleled journey through the latest in tech.
From AI breakthroughs to revolutionary cloud solutions, Tech Show London is your gateway to the trends and technologies that are defining our world.
Looking forward to seeing you at this event!
Join Dwayne McDaniel at SnowFROC 2024 on March 7th, from 3:00 to 3:30 PM, for a session on "Who Goes There? Actively Detecting Intruders With Cyber Deception Tools." Discover strategies and tools for enhancing your cybersecurity posture through the use of cyber deception.
Join Dwayne McDaniel's talk on "Security In An IaC Defined World"! Discover what good security looks like in the world of Infrastructure as Code (IaC), the benefits, and challenges it brings. Join us in Room 101 on Saturday, March 16, 2024, from 2:30 pm.
Join Mackenzie Jackson on March 18th at 4:30 PM for a 30-minute session on "The Attacker's Guide to Exploiting Secrets in the Universe." Uncover the world of cyber vulnerabilities where exposed secrets like API keys and credentials serve as the most coveted targets for attackers.
IT & CYBERSECURITY MEETINGS is an event conducive to meetings and exchanges, with the aim of being a real business accelerator for your cybersecurity activity. With our French team being happy to be part of this event in Cannes, France.
Join Dwayne McDaniel on March 23rd, 2024, at 3:35 pm for a session, titled "Who Goes There? Actively Detecting Intruders With Cyber Deception Tools." This talk will delve into the critical importance of detecting intruders within your system before they can do significant damage.
The International Cybersecurity Forum is Europe’s leading event on digital security and trust issues. Its unique feature is to bring together the entire cybersecurity and “trusted digital” ecosystem: end customers, service providers, solution providers, consultants, law enforcement and government agencies, schools and universities…
So come say hi to our team at Booth B28!
Learn about all the exposed secrets on GitHub!
Join us for the first ever Bsides in Paris, France! More details to follow but we look forward to welcoming you to this exciting event.
Join Dwayne in Canada at Altseccon! He will present: Championing Security: Scaling Security At Every Level
FEVAD, the e-commerce federation of France is happy to welcome GitGuardian for a webinar.
Join Dwayne McDaniel on 12th of April starting 9 am, and discover how to leverage git hooks and open-source tools to prevent sensitive data from being exposed in your shared hosted repos.
Rejoignez-nous pour une soirée de discussions passionnantes autour d'un verre, le tout dans une ambiance conviviale. Nous vous attendons avec impatience !
Uncover the widespread problem of hardcoded credentials with Dwayne McDaniel and explore strategies to mitigate risks and enhance security in your organization! The talk will be at Room 4, Wednesday, April 24, starting 11 am.
Learns the ins and outs of SCA
RSA Conference is the premier series of global events and year-round learning for the cybersecurity community. And GitGuardian is happy to sponsor the event and be at booth 6383 and in addition, also be part of the AppSec Village; where we are running an exciting POD activity.
Join Dwayne McDaniel in reimagining security across your organization with the concept of Security Champions, scaling security at every level to combat the challenges of an ever-evolving threat landscape!
AI-assisted coding tools increase your delivery speed… and unfortunately security risks as well.
Nordic IT Security cyber security forum has been around for 15 years now, acting as a steering wheel for navigation through the Nordic’s “cybersecurity watch-out” scheme, with its notable speakers and partners. And this year will include GitGuardian as a key sponsor.
GitGuardian vous convie à sa conférence annuelle sur la sécurité applicative. Nous vous recevrons le 11 juin 2024 dès 16h, dans les locaux de Bpifrance, en plein cœur de Paris.
Cet évènement gratuit et en français réunira des professionnels de la sécurité, des acteurs clés de l’écosystème, et des partenaires pour une après-midi de partage et d'échanges sur la sécurité du code.
Nous vous dévoilerons les dernières tendances en matière d’attaque et défense de la supply chain logicielle.
Nous accueillerons des responsables sécurité de grandes entreprises françaises. Ils expliqueront les démarches mises en place dans leurs organisations pour faire face à ces nouvelles problématiques, et partageront leur retour d’expérience.
Nous clôturerons cette journée avec un apéritif pour prolonger les échanges dans une ambiance conviviale.
Join Mackenzie Jackson on June 13, 2024, at La Farga, Hospitalet, Barcelona, for "The Hackers Guide to AI: Malicious Use Cases for LLMs." Learn how malicious actors use AI for nefarious purposes, from prompt injections that can hijack email accounts to creating malware-laced AI applications. This essential 50-minute session starts at 12:25 pm. Discover how to protect against AI threats effectively!
Join Dwayne McDaniel at RULE4 ROOM (Wittemyer Courtroom) on Friday from 10:30 am to 11:20 am for an engaging session titled "Who Goes There? Actively Detecting Intruders With Cyber Deception Tools." Discover how to use honeytokens—decoy credentials that alert you to intruders—to enhance your security measures.
Join Mackenzie Jackson at BSides Leeds 2024 for "The Miscreant's Field Manual for Exploiting Secrets" on Friday, June 14th. This session, scheduled for 10:30 am, offers a deep dive into exploiting vulnerabilities for accessing protected data.
Join Mackenzie Jackson for "The Hackers AI Handbook: Malicious Use Cases for AI Models" on June 19th in ROOM 4A at the conference in Krakow, Poland. This session, running from 18:10 to 18:35, delves into how AI can be exploited for malicious purposes
Secure Your Code, Secure Your Future
CodeSecDays Virtual is here to deepen your understanding of code security. Join GitGuardian, Snyk, Docker, CyberArk, Chainguard, CircleCI and more for a full-day exploration of cutting-edge DevSecOps solutions!
Dive deep into key topics such as generative AI, application security posture management, container security, secrets security, open-source security, and more. Our lineup of industry experts will guide you through insightful discussions and practical sessions to equip you with the knowledge and tools needed to safeguard your code and the underlying software delivery pipeline.
Register now to reserve your spot on Wednesday, June 26, and embark on a journey to fortify your code and shape the future of secure software delivery!
Join Dwayne McDaniel on Wednesday, June 26, 2024, from 2:45pm to 3:20pm PDT for "Championing Security: Scaling Security at Every Level" at GitGuardian. In this session, explore how to multiply your security efforts using the Security Champions program, where team members outside of the security department help enhance organizational security practices.
Join Mackenzie Jackson for "The Hackers Guide to AI: Malicious Use Cases for LLMs" on [event date], from 13:45 to 14:15. This talk delves into the dark side of AI, exploring how large language models (LLMs) can be manipulated for nefarious purposes.
Join us for a comprehensive webinar on self-hosted solutions, featuring industry experts Romain Jouhannet from Gitguardian, Adrian Mouat from Chainguard and Chuck D'Antonio from Replicated.
Meet with the GitGuardian team at Business Hall Booth 4624 at Black Hat USA, the internationally recognized cybersecurity event providing the community with the latest cutting-edge research, developments, and trends.
Test your secrets detection abilities at GitGuardian's Pod Exercise in AppSec Village!
Before you can deal with secrets sprawl, you first need to understand how deep the issue of plaintext secrets can be. Improperly stored and shared secrets goes beyond just the top layer of code that you put in production. It affects feature branches, old commits, logs, and communication and collaboration tools.
In this exercise you will be challenged to find all the valid secrets in a simulated environment manually and then by using special tools to make it much easier. You will be able to apply the lessons learned to make your organization safer in no time.
Join us for a comprehensive webinar on the role of threat modeling and how to measure the impact of your security efforts, aligning closely with the principles of DevSecOps. You’ll learn about integrating security into every step of the software development lifecycle (SDLC), from identifying and managing vulnerabilities to implementing security gates that prevent the introduction of new risks
Join Dwayne McDaniel for "Security In An IaC Defined World" at Blue Team Con in Chicago!
Join the GitGuardian team at booth 817 at InfoSec World, where security executives and practitioners come to learn new strategies, techniques and tools to manage cyber risk.
Join us for a 20-minute live demo of GitGuardian Honeytoken with our in-house experts Dwayne McDaniel and Jason Miller. Come and see how GitGuardian can help you safeguard your software supply chain with Honeytoken!
Join us for a comprehensive webinar on implementing Zero Trust as the standard across the whole of the organization and having flawless defenses.
Meet with the GitGuardian team at booth G304 in the Exhibitor Hall at The Open Web Application Security Project (OWASP)'s annual event, which brings together multifaceted communities to engage in various education events, trainings, and entertainment-based gatherings to enhance skills, increase connections, and balance to the AppSec world.
Meet the GitGuardian team at The State Room in Boston during Venafi's three-day exploration of the latest, most visionary trends shaping machine identity and cybersecurity.
Join Dwayne McDaniel for "What Is Going On In Your Source Code? Understanding SCA In Plain Language" at Bsides Orlando.
Join us on for a concise 20-minute live demo of our GitGuardian Public Monitoring solution with our two experts, Dwayne McDaniel & Jason Miller. Come and see how GitGuardian can help you find your past, present, and future secrets leaks on public GitHub.
Les Assises are the unmissable rendezvous for all cybersecurity experts. It is the founding event of the cybersecurity market, driven by an engaged and passionate community. More than an event, Les Assises have become a true institution for all the key players for the last 20 years. It is a unique meeting place to get insights and go further current and future cyber issues.
Join Dwayne McDaniel for "What Is Going On In Your Source Code? Understanding SCA In Plain Language" at DevSecCon!
Join Dwayne McDaniel for "What Is Going On In Your Source Code? Understanding SCA In Plain Language" at Bsides Orlando.
Join us for a 20-minute live demo of GitGuardian SCA with our in-house experts Dwayne McDaniel and Jason Miller. Come and see how GitGuardian can help you secure your software supply chain by prioritizing open-source or third-party risks and managing SBOMs.
Secure VW is a community-led event that covers a variety of different cybersecurity topics, where we are proud to have Dwayne McDaniel give a live session!
Join Dwayne McDaniel for "What Is Going On In Your Source Code? Understanding SCA In Plain Language" at Bsides Orlando.
Join us for a 20-minute live demo of GitGuardian Secrets Detection with our in-house experts Dwayne McDaniel and Jason Miller. Come and see how GitGuardian can help you control the chaos of secrets sprawl in your software supply chain!
Join us as CNCF's flagship conference gathers adopters and technologists from leading open source and cloud native communities in Salt Lake City, Utah from November 12-15, 2024.
Join GitGuardian with a team of business leaders, IT professionals, and cybersecurity enthusiasts from across the UK and Ireland at the CISO Inspired Summit. This event stands out as an exclusive hub for networking, building long-lasting professional relationships, and immersing oneself in the dynamic world of information security.
Join us for a 20-minute live demo of GitGuardian Honeytoken with our in-house experts Dwayne McDaniel and Jason Miller. Come and see how GitGuardian can help you safeguard your software supply chain with Honeytoken!
Join us on for a concise 20-minute live demo of our GitGuardian Public Monitoring solution with our two experts, Dwayne McDaniel & Jason Miller. Come and see how GitGuardian can help you find your past, present, and future secrets leaks on public GitHub.
GitGuardian is the code security platform for the DevOps generation.
With automated secrets detection and remediation, our platform enables Dev, Sec, and Ops to advance together towards the Secure Software Development Lifecycle.
Subscribe to our newsletter to receive the latest content and updates from GitGuardian.
