Credentials don't stay put. The surface where credentials actually live, the developer machine itself, is the one most scanning stacks can't see.

Vermeer, a global manufacturing leader, is rolling out credential visibility past the repo and onto the laptop itself. In this session, CJ May (Security at Vermeer) joins Emmanuelle Franquelin (Senior Product Manager, Endpoint Protection at GitGuardian) to walk through what they've found so far, what surprised them, and where they think the credential attack surface is actually headed.

You'll learn:

• Where credentials actually live on a modern machine (config files, shell history, MCP configs, and the artifacts AI coding agents like Claude Code, Cursor, and Copilot leave behind), and what endpoint scans can surface
• Why the non-developer workstation matters more than most teams think, and how AI hooks and live validity checks make endpoint findings actionable in real time
• What teams can do with all the findings