Secrets are no longer just a repo problem. GitGuardian's own research found an average of 150 secrets sitting on a sample of developer endpoints. Dan Nguyen-Huu, Partner at Decibel Partners, joins GitGuardian CMO Carole Winqwist to unpack why this is cybersecurity's "COVID moment."

• Secrets have moved to the endpoint: An average of 150 secrets sit on a sample of developer endpoints, per GitGuardian's own research, past repo-only scanning.
• Agentic attacks compress dwell time: Attackers now spend tokens instead of human hours to move laterally, shrinking the window defenders have to respond.
• The Hugging Face incident is a warning shot: Autonomous AI agents organized on message boards and escalated privileges on their own, detailed at Black Hat 2026.
• Detection without remediation is just noise: Security teams need a way to prioritize and fix what's exploitable now, not another pile of findings.

‍