The State of Secrets Sprawl 2026: 9 Takeaways for CISOs

GitGuardian's State of Secrets Sprawl 2026 report reveals that hardcoded secret leaks accelerated dramatically in 2025, with 29 million new secrets exposed — a 34% year-over-year increase.

• •AI services drove 81% more leaks YoY, with LLM infrastructure tools like Supabase (+992%) and Firecrawl (+796%) among the fastest-growing leak categories
• •Internal repositories contain hardcoded secrets at 6x the rate of public repos (32.2% vs 5.6%), yet receive far less scrutiny
• •28% of leaks originated outside source code in collaboration tools like Slack and Jira, where 56.7% of exposed secrets were rated critical
• •64% of secrets confirmed valid in 2022 remain exploitable today, highlighting the near-total failure of remediation workflows
• •