OSS Spotlight: Gitleaks
An open-source git secrets scanner, why entropy-based detection still misses secrets leaked outside git entirely, and why the project itself is winding down new feature work.
Weekly Security Briefing
News, vendor watch, and the open-source tools worth knowing about — plus a dedicated eye on cloud security and hardening. Curated for practitioners, not headline chasers.
Free weekly. No spam. Unsubscribe anytime.An open-source git secrets scanner, why entropy-based detection still misses secrets leaked outside git entirely, and why the project itself is winding down new feature work.
An open-source policy engine that turns a recurring audit of public S3 buckets across every account into a five-line YAML file, plus the dry-run habit that keeps it safe.
Misconfigurations, CSPM findings, IaC security, and hardening checklists — covered evenly across AWS, Azure, and GCP.
Biweekly →Launches, acquisitions, funding, and notable threat research from prominent vendors — read with healthy skepticism of the hype.
As-needed →Smaller, often-overlooked open-source scanners and hardening scripts that don't get mainstream coverage.
Biweekly →Longer original analysis — a technique explained, a breach post-mortem, a tool walkthrough. Published monthly.
Coming soon