Honeytoken by GitGuardian detects intrusions and code leaks in your software supply chain. It is designed to safeguard the Software Development Lifecycle (SDLC) by embedding honeytokens across various components such as laptops, source control, CI/CD pipelines, internal registries, wikis, messaging, and project management tools. Honeytoken can be created through the GitGuardian dashboard or API and deployed in code or Jenkins environments. When an attacker accesses the system and triggers the honeytoken, instant alerts are sent to the Security and SOC team. Honeytoken distinguishes between real secrets and honeytokens, resulting in a low false positive rate. It provides instant alerts, reducing the Mean-Time-To-Detect a breach to a few minutes. Honeytoken integrates event alerts with SIEMs and ITSMs using custom webhooks and provides relevant information like IP address, timestamp, source, contextual tags, and the triggering event for investigation. It helps detect code leakage and alerts about leaks on public GitHub with the “Publicly exposed” flag. Honeytoken can be deployed across every repository with a secret leak occurrence for instant breach detection and prioritizes remediation of secrets. It also invalidates credentials as soon as possible when valid secrets are found in codebases where a honeytoken was triggered.
