ReversingLabs adds new context-based, secret-detection capabilities
Summary
“We are using our knowledge of exposed secrets in the billions of files we’ve previously analyzed to provide that context,” said Tomislav Pericin, co-founder and chief software architect at ReversingLabs. In early 2021 CircleCI and CodeCov — two significant, cloud-based continuous integration and delivery platforms — experienced breaches that compromised user data, including environment variables and API tokens. The incidents highlighted the importance of exposed secrets and led to several organizations resetting their API tokens and taking other security measures to protect their applications and data. Existing secret-detection tools are flooding developers with enormous amounts of false positives, causing them to bypass detections rather than triage and fix them, the company said. ReversingLabs software focuses on prioritizing remediation efforts by suppressing commonly shared secrets such as third party, open source, and testing keys, thus reducing the burden of manual triage.