Cybersecurity Infographic Series · Identity and Access Security

Secrets Management and Credential Sprawl (Original edition)

An API key hardcoded once doesn't expire when the project ends — it stays valid in code, logs, and forgotten scripts until someone finds it, or someone else does.

Downloads

  • Infographic (PNG, 2880×8214, 1.3 MB)
  • Field reference (PDF, 2 sheets, 449 KB)
  • Infographic, light edition (PNG, 1.2 MB)
  • Field reference, light edition (PDF, 457 KB)

Free to download, no sign-up. Topic 31 of 91 in the series.

More in Identity and Access Security

  • Passkeys
  • Identity and Access Management (IAM)
  • Privileged Access Management (PAM)
  • Password Managers and Browser-Saved Risk
  • Non-Human Identity and Machine-to-Machine Auth
  • Identity Threat Detection and Response (ITDR)
Previous: Password Managers and Browser-Saved Risk · Next: Threat Intelligence and Threat Hunting

Back to the full library