Field Notes
Field Notes
Honest teardowns and field notes from a secret-debt triage practice.
You have a wall of secret scanning findings. Nobody's triaging them.
Ran gitleaks, GitGuardian, or GitHub secret scanning and got a wall of findings? The scanner did its job. The triage is the part nobody sells.
Read →I scanned my own SaaS for secret debt. Here's the three-line answer.
A real Unrotated assessment run on Ignaria — 289 raw findings, four hardcoded credentials in HEAD, and the triage that turns a wall of noise into a short list you can act on.
Read →Sound familiar?
Your secret scanning is probably already running, producing a wall of findings nobody is triaging. I turn that wall into a short, human-judged list — rotate these today, ignore these forty — delivered as a prioritized report in a week. Read-only, no tooling to install, a scoped token you revoke anytime. If your secret hygiene is already clean, you'll know in five minutes and I'll leave you alone.
Book a 20-minute callMore than 20 years building and architecting software, now focused on one under-owned problem — credentials committed to version control that get found and never rotated.