Back

Dylan Ayrey

Co-founder & CEO

Truffle Security Co.

Bio

Dylan is the original author of the open source version of TruffleHog, which he built after recognizing just how commonly credentials and other secrets were exposed in Git. Coming most recently from the Netflix security team, Dylan has spoken at a number of popular information security conferences, including Defcon and Blackhat. The popularity of TruffleHog, and growing need for services like it, led him to co-found Truffle Security to deliver technology that works across all platforms where credentials can be exposed.

Session

(The) Postman Carries a Lot of Secrets

Abstract

We're open sourcing a new tool that identifies secrets in Postman. This talk digs into research showing how Postman became one of the largest public sources of leaked secrets, walks through the unique challenges of identifying secrets in Postman workspaces, and provides suggestions on how to secure your developer's usage of Postman, using open source tools like TruffleHog.

©2024 ProjectDiscovery, Inc. All rights reserved.