Code & secrets
Secrets
Keys and tokens before they leave the building.
SOC 2 Type II · ISO 27001 · 1,400 security teams
SOC 2 Type II · ISO 27001 · 1,400 security teams
Palisade
Palisade
Risk score82/100open
Next page/
Home
Solutions · Engineering
For engineering teams
Ship fast and keep keys out of the repository.
Checks run where engineers already work: on the pull request, in the pipeline and in chat. A leaked key is flagged before the merge, with the fix in the same comment.
Engineering4 minfrom a leaked key to revoked
What is open today.
- 1Open
- 2Open
- 3Open
- 4Open
0 of 4 closed
Risk score4 open
01234567890123456789/100
Risk score 82. 4 openWhat you get
- Pull request checks in GitHub and GitLab
- Least-privilege suggestions for cloud roles
- No new dashboard to learn
Built from these products.
Cloud
Cloud
Buckets, ports and roles that answer to the whole internet.
Solutions · Engineering
For engineering teams
Ship fast and keep keys out of the repository.
Checks run where engineers already work: on the pull request, in the pipeline and in chat. A leaked key is flagged before the merge, with the fix in the same comment.
Engineering4 minfrom a leaked key to revoked
What is open today.
- 1Open
- 2Open
- 3Open
- 4Open
0 of 4 closed
Risk score4 open
01234567890123456789/100
Risk score 82. 4 openWhat you get
- Pull request checks in GitHub and GitLab
- Least-privilege suggestions for cloud roles
- No new dashboard to learn
Built from these products.
Code & secrets
Secrets
Keys and tokens before they leave the building.
Cloud
Cloud
Buckets, ports and roles that answer to the whole internet.
Solutions · Engineering
For engineering teams
Ship fast and keep keys out of the repository.
Checks run where engineers already work: on the pull request, in the pipeline and in chat. A leaked key is flagged before the merge, with the fix in the same comment.
Engineering4 minfrom a leaked key to revoked
What is open today.
- 1Open
- 2Open
- 3Open
- 4Open
0 of 4 closed
Risk score4 open
01234567890123456789/100
Risk score 82. 4 openWhat you get
- Pull request checks in GitHub and GitLab
- Least-privilege suggestions for cloud roles
- No new dashboard to learn
Built from these products.
Code & secrets
Secrets
Keys and tokens before they leave the building.
Cloud
Cloud
Buckets, ports and roles that answer to the whole internet.
The products
Five products, one list of what is exposed.
Start with the surface that worries you most. Every product writes into the same findings list, so nothing has to be stitched together later.
1IdentitiesOpenWatching
Identity
Every account, human or machine, and what it can reach.
- Sources
- Okta, Entra ID, Google Workspace
- First findings
- under 1 hour
- Fix
- one click or a ticket
2DevicesOpenWatching
Endpoint
Laptops, phones and servers that have fallen behind.
- Sources
- Jamf, Intune, agent
- Platforms
- macOS, Windows, Linux, iOS, Android
- Agent footprint
- 38 MB
CloudOpenWatching
Cloud
Buckets, ports and roles that answer to the whole internet.
- Sources
- AWS, Azure, Google Cloud
- Access
- read-only role
- Checks
- 640 and growing
Code & secretsOpenWatching
Secrets
Keys and tokens before they leave the building.
- Sources
- GitHub, GitLab, Slack, Jira
- Detectors
- 310 key types
- Median time to revoke
- 4 minutes
Detection & responseOpenWatching
Respond
One timeline from first signal to closed.
- Alerts
- Slack, PagerDuty, email
- Median time to contain
- 4 minutes
- Retention
- 13 months
The products
Five products, one list of what is exposed.
Start with the surface that worries you most. Every product writes into the same findings list, so nothing has to be stitched together later.
- 1
IdentitiesOpenWatching
Identity
Every account, human or machine, and what it can reach.
- Sources
- Okta, Entra ID, Google Workspace
- First findings
- under 1 hour
- Fix
- one click or a ticket
- 2
DevicesOpenWatching
Endpoint
Laptops, phones and servers that have fallen behind.
- Sources
- Jamf, Intune, agent
- Platforms
- macOS, Windows, Linux, iOS, Android
- Agent footprint
- 38 MB
CloudOpenWatching
Cloud
Buckets, ports and roles that answer to the whole internet.
- Sources
- AWS, Azure, Google Cloud
- Access
- read-only role
- Checks
- 640 and growing
Code & secretsOpenWatching
Secrets
Keys and tokens before they leave the building.
- Sources
- GitHub, GitLab, Slack, Jira
- Detectors
- 310 key types
- Median time to revoke
- 4 minutes
Detection & responseOpenWatching
Respond
One timeline from first signal to closed.
- Alerts
- Slack, PagerDuty, email
- Median time to contain
- 4 minutes
- Retention
- 13 months
The products
Five products, one list of what is exposed.
Start with the surface that worries you most. Every product writes into the same findings list, so nothing has to be stitched together later.
- 1
IdentitiesOpenWatching
Identity
Every account, human or machine, and what it can reach.
- Sources
- Okta, Entra ID, Google Workspace
- First findings
- under 1 hour
- Fix
- one click or a ticket
- 2
DevicesOpenWatching
Endpoint
Laptops, phones and servers that have fallen behind.
- Sources
- Jamf, Intune, agent
- Platforms
- macOS, Windows, Linux, iOS, Android
- Agent footprint
- 38 MB
CloudOpenWatching
Cloud
Buckets, ports and roles that answer to the whole internet.
- Sources
- AWS, Azure, Google Cloud
- Access
- read-only role
- Checks
- 640 and growing
Code & secretsOpenWatching
Secrets
Keys and tokens before they leave the building.
- Sources
- GitHub, GitLab, Slack, Jira
- Detectors
- 310 key types
- Median time to revoke
- 4 minutes
Detection & responseOpenWatching
Respond
One timeline from first signal to closed.
- Alerts
- Slack, PagerDuty, email
- Median time to contain
- 4 minutes
- Retention
- 13 months
Start here
Run the sweep on your domain.
Tell us where to look. We set up a read-only connection with you on a short call, and you see your own findings the same day.
We will sweep
- Identity providerNot connected
- Cloud accountsNot connected
- DevicesNot connected
- Code repositoriesNot connected
Start here
Run the sweep on your domain.
Tell us where to look. We set up a read-only connection with you on a short call, and you see your own findings the same day.
We will sweep
- Identity providerNot connected
- Cloud accountsNot connected
- DevicesNot connected
- Code repositoriesNot connected
Start here
Run the sweep on your domain.
Tell us where to look. We set up a read-only connection with you on a short call, and you see your own findings the same day.
We will sweep
- Identity providerNot connected
- Cloud accountsNot connected
- DevicesNot connected
- Code repositoriesNot connected