The State of Secrets Sprawl 2026: 9 Takeaways for CISOs

GitGuardian's State of Secrets Sprawl 2026 research finds a rapidly accelerating global credential exposure problem: 29 million new hardcoded secrets detected on GitHub in 2025, major growth in AI-related leaks, far higher leak rates in internal repos and self-hosted infrastructure, and persistent valid credentials years after discovery; the report highlights supply-chain compromises that harvest secrets from developer endpoints and warns organizations to move from detection to continuous non-human identity governance to mitigate systemic risk.