Notes on code security.

Practical guidance on secrets management, dependency risk, and shipping secure code, from the team building KAIKI.

Incident Response

The First Hour After a Key Leaks

May 27, 2026

5 min.

Rotate, revoke, and audit, in that order. A practical runbook for the moment a credential goes public.

Incident Response

The First Hour After a Key Leaks

May 27, 2026

4 min read

Rotate, revoke, and audit, in that order. A practical runbook for the moment a credential goes public.

Incident Response

The First Hour After a Key Leaks

May 27, 2026

4 min read

Rotate, revoke, and audit, in that order. A practical runbook for the moment a credential goes public.

Rotation glyph on a dark navy grid, illustrating credential rotation

Secrets Management

Rotating a Leaked Credential Without Breaking Production

Jun 16, 2026

4 min.

Dual-key rotation, staged cutovers, and how to avoid taking your own service down while you fix a leak.

Secrets Management

Rotating a Leaked Credential Without Breaking Production

Jun 16, 2026

4 min read

Dual-key rotation, staged cutovers, and how to avoid taking your own service down while you fix a leak.

Cube glyph on a dark navy grid, illustrating secrets in Docker, Terraform and YAML

Infrastructure

Hidden Credentials in Docker, Terraform, and YAML

Jul 7, 2026

5 min.

Secrets rarely stay in application code. Infrastructure files are the blind spot most teams forget to scan.

Infrastructure

Hidden Credentials in Docker, Terraform, and YAML

Jul 7, 2026

4 min read

Secrets rarely stay in application code. Infrastructure files are the blind spot most teams forget to scan.

Gauge glyph on a dark navy grid, illustrating severity in a scan report

Scan Reports

Reading a Scan Report: Critical, High, Medium, Low

May 9, 2026

5 min.

What each severity level means in practice, and which findings deserve your next ten minutes.

Scan Reports

Reading a Scan Report: Critical, High, Medium, Low

May 9, 2026

4 min read

What each severity level means in practice, and which findings deserve your next ten minutes.

Magnifying glass glyph on a dark navy grid, illustrating scanning beyond regex

AI & Security

Regex Alone Cannot Find Your Secrets

Apr 21, 2026

5 min.

Pattern matching finds candidates. Deciding which ones are real takes context, and that is where most scanners stop.

AI & Security

Regex Alone Cannot Find Your Secrets

Apr 21, 2026

4 min read

Pattern matching finds candidates. Deciding which ones are real takes context, and that is where most scanners stop.

Ship With Confidence

Zero config, 50+ secret patterns, AI-powered analysis. Start scanning in seconds.

Start scanning free