StonePath Cyber · Application & AI Security
Secrets Detection & Remediation
We find passwords, API keys and tokens exposed in your code, repositories and pipelines, help you rotate them, and put controls in place so new secrets do not leak.
$2,497 one-time
Secure checkout by Stripe · We email you after checkout to schedule scoping
Who it’s for
Engineering teams with years of repository history, shared credentials or pipeline configuration that may contain exposed secrets.
What’s included
- Repository & history scan — in-scope repositories scanned, including commit history
- Pipeline & config scan — build logs, pipeline variables and configuration files reviewed for secrets
- Validation & triage — findings checked for whether they are live, and ranked by impact
- Guided rotation — a rotation plan and hands-on support to revoke and replace exposed secrets
- Prevention controls — pre-commit and pipeline checks that block new secrets from being committed
- Secrets management guidance — recommendations for storing and injecting secrets safely
How it works
Pay securely through Stripe.
We agree repositories, pipelines and access.
Our security team scans, triages and supports rotation.
Prevention controls and a walkthrough with your team.
What we need from you
A technical point of contact and read access to the in-scope repositories and pipelines.
Questions
Do you keep copies of our secrets?
No. Findings are reported by location and type, and secret values are masked in reporting.
Do you rotate secrets for us?
We provide a rotation plan and work alongside your team. Your team approves and performs changes to production systems.
Which code platforms are covered?
The major hosted and self-hosted code platforms. We confirm scope on the scoping call.
Related
CI/CD Pipeline Security Hardening
$2,997 one-time
A review and hardening of your build and deployment pipelines so attackers cannot use them to tamper with code
View detailsAI Model Security Assessment
$4,997 one-time
An assessment of the AI models and AI features you run
View detailsService descriptions reflect general industry practice. Nothing on this page is a compliance determination, a certification, or a guarantee of any outcome. Final scope is confirmed with you before work begins.