Field Notes — Unrotated Security

Field Notes

Honest teardowns and field notes from a secret-debt triage practice.

August 18, 2026

I scanned my own SaaS for secret debt. Here's the three-line answer.

A real Unrotated assessment run on Ignaria — 289 raw findings, four real credentials in HEAD, and the triage that turns a wall of noise into a short list you can act on.

Read →

Sound familiar?

A scanner is probably already running at your org, producing a wall of findings nobody is triaging. I turn that wall into a short, human-judged list — rotate these today, ignore these forty — delivered as a prioritized report in a week. Read-only, no tooling to install, a scoped token you revoke anytime. If your secret hygiene is already clean, you'll know in five minutes and I'll leave you alone.

Book a 20-minute call

Nearly 30 years building and architecting software, now focused on one under-owned problem — credentials committed to version control that get found and never rotated.