Exposure DB
1,048 exposure sites - every place a customer-controlled credential or secret can leak - each mapped to the edge it emits, its collection recipe, and what leaks.
406
aws
377
azure
265
gcp
563
critical severity
250
medium severity
233
high severity
2
low severity
accesscontextmanager.accessPolicies.get.title - leaks credential, api_key, sensitive_data, pii
appengine.apps.services.versions.get.betaSettings.<value> - leaks credential, password, api_key, oauth_token, private_key, connection_string, sensitive_data
artifactregistry.projects.locations.repositories.packages.get.annotations.<value> - leaks credential, api_key, sensitive_data, pii
artifactregistry.projects.locations.repositories.get.{description,labels.<value>} - leaks credential, api_key, sensitive_data, pii
artifactregistry.projects.locations.repositories.packages.versions.get.annotations.<value> - leaks credential, api_key, sensitive_data, pii
batch.projects.locations.jobs.get.status.statusEvents[].description - leaks credential, password, api_key, oauth_token, private_key, connection_string, sensitive_data
bigquery.datasets.get.{description,labels.<value>} - leaks credential, api_key, sensitive_data, pii
bigquery.jobs.get.configuration.query.{query,queryParameters[]} - leaks credential, customer_data, pii, sensitive_data
bigquery.rowAccessPolicies.get.filterPredicate - leaks credential, api_key, sensitive_data, pii
bigquery.tables.get.{description,labels.<value>} - leaks credential, api_key, sensitive_data, pii
bigtableadmin.projects.instances.get.labels.<value> - leaks credential, api_key, sensitive_data, pii
bigtableadmin.projects.instances.tables.get.columnFamilies.<value>.gcRule - leaks sensitive_data
privateca.projects.locations.caPools.certificates.get.{pemCertificate,pemCertificateChain[]} - leaks certificate, sensitive_data
certificatemanager.projects.locations.certificates.get.labels.<value> - leaks credential, api_key, sensitive_data, pii
certificatemanager.projects.locations.certificates.get.pemCertificate - leaks certificate, sensitive_data
compute.securityPolicies.get.rules[].description - leaks credential, api_key, sensitive_data, pii
compute.securityPolicies.get.rules[].match.expr.expression - leaks credential, api_key, sensitive_data, pii
cloudasset.feeds.get.{assetNames[],condition.{expression,title,description},feedOutputConfig} - leaks credential, api_key, sensitive_data, pii
cloudasset.searchAllResources.results[].{displayName,description,labels.<value>,additionalAttributes} - leaks credential, pii, sensitive_data
cloudbuild.projects.builds.get.logUrl/logsBucket -> Cloud Logging or Cloud Storage log entries - leaks credential, password, api_key, oauth_token, private_key, connection_string, sensitive_data
clouddeploy.projects.locations.deliveryPipelines.get.{annotations.<value>,labels.<value>,description} - leaks credential, api_key, sensitive_data, pii
clouddeploy.projects.locations.deliveryPipelines.releases.get.{annotations.<value>,labels.<value>,description} - leaks credential, api_key, sensitive_data, pii
clouddeploy.projects.locations.targets.get.{annotations.<value>,labels.<value>,description} - leaks credential, api_key, sensitive_data, pii
dns.managedZones.get.{description,labels.<value>} - leaks credential, api_key, sensitive_data, pii
cloudidentity.groups.get.{groupKey.id,additionalGroupKeys[].id,displayName,description} - leaks pii, sensitive_data
cloudidentity.groups.memberships.get.{preferredMemberKey.id,roles[].name} - leaks pii, sensitive_data
run.projects.locations.jobs.get.template.template.containers[].{command[],args[]} - leaks credential, password, api_key, access_key, secret_key, oauth_token, sensitive_data
run.projects.locations.services.get.template.containers[].{command[],args[]} - leaks credential, password, api_key, access_key, secret_key, oauth_token, sensitive_data
run.projects.locations.services.get.{labels.<value>,annotations.<value>} - leaks credential, api_key, sensitive_data, pii
run.projects.locations.workerPools.get.template.containers[].{command[],args[]} - leaks credential, password, api_key, access_key, secret_key, oauth_token, sensitive_data
cloudscheduler.projects.locations.jobs.get.description - leaks credential, api_key, sensitive_data, pii
sql.instances.get.settings.databaseFlags[].value - leaks credential, password, api_key, oauth_token, private_key, connection_string, sensitive_data
sql.instances.get.settings.userLabels.<value> - leaks credential, api_key, sensitive_data, pii
composer.projects.locations.environments.get.labels.<value> - leaks credential, api_key, sensitive_data, pii
dataflow.projects.locations.jobs.get.labels.<value> - leaks credential, api_key, sensitive_data, pii
dataflow.projects.locations.jobs.messages.list.jobMessages[].messageText - leaks credential, password, api_key, oauth_token, private_key, connection_string, sensitive_data
dataproc.projects.regions.clusters.get.labels.<value> - leaks credential, api_key, sensitive_data, pii
dataproc.projects.regions.jobs.get.driverOutputResourceUri -> Cloud Storage object bytes - leaks credential, password, api_key, oauth_token, private_key, connection_string, sensitive_data
datastream.projects.locations.streams.get.errors[].{message,details} - leaks credential, password, api_key, oauth_token, private_key, connection_string, sensitive_data
datastream.projects.locations.streams.get.labels.<value> - leaks credential, api_key, sensitive_data, pii
deploymentmanager.deployments.get.{description,labels[].value} - leaks credential, api_key, sensitive_data, pii
deploymentmanager.operations.get.error.errors[].message - leaks credential, password, api_key, oauth_token, private_key, connection_string, sensitive_data
eventarc.projects.locations.triggers.get.destination - leaks sensitive_data
eventarc.projects.locations.triggers.get.{eventFilters.<value>,labels.<value>} - leaks credential, api_key, sensitive_data, pii
file.projects.locations.instances.get.{description,labels.<value>} - leaks credential, api_key, sensitive_data, pii
firestore.projects.databases.documents.get.name - leaks pii, sensitive_data
compute.firewalls.get.description - leaks credential, api_key, sensitive_data, pii
compute.firewallPolicies.getRule.{targetResources[],targetServiceAccounts[]} - leaks pii, sensitive_data
compute.instances.get.labels.<value> - leaks credential, api_key, sensitive_data, pii
compute.instances.getSerialPortOutput.contents - leaks credential, password, api_key, oauth_token, private_key, connection_string, sensitive_data