Exposure DB
1,048 exposure sites - every place a customer-controlled credential or secret can leak - each mapped to the edge it emits, its collection recipe, and what leaks.
406
aws
377
azure
265
gcp
563
critical severity
250
medium severity
233
high severity
2
low severity
GetActivityTask.input - leaks credential, password, api_key, bearer_token, customer_data, pii
GetExecutionHistory.events[].*EventDetails.input / output / parameters / Result / cause - leaks credential, password, api_key, bearer_token, session_token, customer_data, pii
DescribeExecution.input / output - leaks credential, password, api_key, bearer_token, session_token, customer_data, pii
timestream-query:Query.Rows[].Data[].ScalarValue - leaks credential, password, api_key, session_token, connection_string, customer_data, pii
Traffic Mirror target packet capture - leaks credential, password, api_key, bearer_token, session_token, customer_data, pii
OCI registry manifest, layer, configuration, and artifact blobs - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, private_key, source_code_secret
Data Lake Storage Gen2 Path file bytes - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, private_key, source_code_secret, sensitive_data, pii, customer_data
Azure AI Search index document fields - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data
Microsoft.DocumentDB/databaseAccounts/listKeys -> primaryMasterKey - leaks credential, access_key
Cosmos DB SQL container items - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data
Cosmos DB MongoDB documents, Cassandra rows, Gremlin vertices/edges, or Table entities - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data
Databricks SQL Statement Execution result.data_array - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data
Microsoft.Security/locations/alerts properties.{description,remediationSteps,entities,extendedProperties,resourceIdentifiers} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data
Guest-mounted managed disk filesystem blocks/files - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, private_key, source_code_secret, sensitive_data, pii, customer_data
CloudEvents/Event Grid event.{data,subject,topic,eventType} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data
Event Hubs Capture Avro files in configured Storage destination - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data
AMQP EventData.{body,properties,systemProperties} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data
Log Analytics query response.tables[].rows[] - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data
Azure Monitor Activity Log event.{caller,claims,authorization,properties,httpRequest,resourceId,status} - leaks credential, oauth_token, sensitive_data, pii
Mounted NFS/SMB volume file content - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, private_key, source_code_secret, sensitive_data, pii, customer_data
Notification Hubs registration.{PnsHandle,Tags,SecondaryTile,TemplateBody} - leaks credential, sensitive_data, pii, customer_data
Network Watcher NSG/virtual network flow-log records - leaks sensitive_data, pii, customer_data
Azure OpenAI File.{filename,purpose,content} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, source_code_secret, sensitive_data, pii, customer_data
PostgreSQL/MySQL protocol query result rows - leaks database_credential, sensitive_data, pii, customer_data, credential, password, api_key, access_key, secret_key, oauth_token, connection_string
Purview Atlas Entity.{attributes,relationshipAttributes,labels,contacts,customAttributes} - leaks credential, sensitive_data, pii, customer_data
RESP GET/MGET/HGETALL/SCAN result values - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data
Service Bus dead-letter subqueue Message.{body,applicationProperties,deadLetterReason,deadLetterErrorDescription} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data
AMQP/Service Bus Message.{body,applicationProperties,subject,correlationId,sessionId} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data
TDS SELECT result-set cells - leaks database_credential, sensitive_data, pii, customer_data, credential, password, api_key, access_key, secret_key, oauth_token, connection_string
Blob.{content,metadata,tags} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data
Azure File.{content,metadata} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data
Queue Message.{MessageText,metadata} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data
Table Entity user-defined properties - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data
Synapse SQL result-set cells - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data
Virtual WAN/VPN Gateway packet capture output blob - leaks credential, sensitive_data, pii, customer_data
accesscontextmanager.accessPolicies.servicePerimeters.get.{status,spec}.{resources[],accessLevels[],ingressPolicies[],egressPolicies[]} - leaks pii, sensitive_data
artifactregistry.projects.locations.repositories.files.download.HTTP response body - leaks source_code_secret, credential, private_key, customer_data
bigquery.jobs.getQueryResults.rows[].f[].v - leaks credential, customer_data, pii, sensitive_data
bigquery.tabledata.list.rows[].f[].v - leaks credential, customer_data, pii, sensitive_data
google.bigtable.v2.Bigtable.ReadRows.ReadRowsResponse.chunks[].value - leaks credential, customer_data, pii, sensitive_data
cloudasset.exportAssets.outputConfig.gcsDestination.uri -> exported asset JSON - leaks credential, pii, customer_data, sensitive_data
cloudasset.analyzeIamPolicy.mainAnalysis.analysisResults[].{iamBinding,accessControlLists,identityList} - leaks pii, sensitive_data
SQL SELECT.result rows - leaks database_credential, credential, customer_data, pii, sensitive_data
composer.projects.locations.environments.get.config.dagGcsPrefix/storageConfig.bucket -> DAG, plugin, data, and log object bytes - leaks source_code_secret, credential, password, api_key, private_key, customer_data
NFS READ.exported file bytes - leaks credential, private_key, source_code_secret, customer_data, pii
firestore.projects.databases.documents.get.fields.<value> - leaks credential, customer_data, pii, sensitive_data
firestore.projects.databases.documents.runQuery.[].document.fields.<value> - leaks credential, customer_data, pii, sensitive_data
logging.entries.list.entries[].{textPayload,jsonPayload,protoPayload,labels} - leaks credential, customer_data, pii, sensitive_data
storage.objects.get.HTTP response body under artifacts.<project>.appspot.com - leaks source_code_secret, credential, private_key, customer_data
storage.objects.get.HTTP response body (alt=media) - leaks credential, private_key, source_code_secret, customer_data, pii