Exposure DB
1,048 exposure sites - every place a customer-controlled credential or secret can leak - each mapped to the edge it emits, its collection recipe, and what leaks.
406
aws
377
azure
265
gcp
563
critical severity
250
medium severity
233
high severity
2
low severity
GetDataCellsFilter.DataCellsFilter.RowFilter.FilterExpression - leaks credential, password, api_key, sensitive_data, pii
GetDataLakeSettings.DataLakeSettings.Parameters.<value> - leaks credential, sensitive_data
ListLFTags.LFTags[].TagValues[] - leaks credential, sensitive_data, pii
ListTags.Tags.<value> - leaks credential, sensitive_data
GetContainerServices.containerServices[].tags[].value - leaks credential, sensitive_data
GetInstance.instance.tags[].value - leaks credential, sensitive_data
GetAllowList.Criteria.Regex / Criteria.S3WordsList.ObjectKey -> S3 object - leaks credential, password, api_key, sensitive_data
GetCustomDataIdentifier.{regex,keywords[],ignoreWords[]} - leaks credential, password, api_key, sensitive_data
ListTagsForResource.tags.<value> - leaks credential, sensitive_data
ListTags.Tags[].Value - leaks credential, sensitive_data
CloudWatch Logs Amazon MQ general/audit log event.message - leaks credential, password, sensitive_data, pii
ListTags.Tags.<value> - leaks credential, sensitive_data
CloudWatch Logs/S3/Firehose MSK broker log record - leaks credential, password, sensitive_data, pii
ListTagsForResource.Tags.<value> - leaks credential, sensitive_data
DescribeDBClusterParameters.Parameters[].ParameterValue - leaks credential, connection_string, sensitive_data
ListTagsForResource.TagList[].Value - leaks credential, sensitive_data
CloudWatch Logs/S3/Firehose Network Firewall log record - leaks credential, api_key, bearer_token, customer_data, pii, sensitive_data
ListTagsForResource.Tags[].Value - leaks credential, sensitive_data
DescribeRuleGroup.RuleGroup.RuleVariables.IPSets[].Definition / PortSets[].Definition - leaks sensitive_data, pii, credential
DescribeRuleGroup.RuleGroup.RulesSource.RulesString - leaks credential, api_key, bearer_token, sensitive_data
CloudWatch Logs OpenSearch application/search-slow/index-slow/audit event.message - leaks credential, password, api_key, bearer_token, customer_data, pii
ListTags.TagList[].Value - leaks credential, sensitive_data
DescribeDomainConfig.DomainConfig.AdvancedSecurityOptions.Options.SAMLOptions.Idp.MetadataContent - leaks certificate, pii, sensitive_data
ListTags.Tags.<value> - leaks credential, sensitive_data
DescribeAccount.Account.Email - leaks pii, sensitive_data
DescribePolicy.Policy.Content - leaks credential, sensitive_data
ListTagsForResource.Tags[].Value - leaks credential, sensitive_data, pii
ListTagsForResource.Tags.<value> - leaks credential, sensitive_data
DescribeAnalysisDefinition.Definition (filters, parameters, calculated fields, static values) - leaks credential, password, api_key, customer_data, pii, sensitive_data
DescribeDashboardDefinition.Definition - leaks credential, password, api_key, customer_data, pii, sensitive_data
DescribeDataSet.DataSet.PhysicalTableMap.<id>.CustomSql.SqlQuery - leaks credential, password, api_key, sensitive_data, pii
ListTagsForResource.Tags[].Value - leaks credential, sensitive_data
GetPermission.permission.permission - leaks credential, sensitive_data
GetResourceShares.resourceShares[].tags[].value - leaks credential, sensitive_data
DownloadDBLogFilePortion.LogFileData - leaks credential, password, sensitive_data, pii
DescribeDBParameters.Parameters[].ParameterValue - leaks credential, password, connection_string, sensitive_data
ListTagsForResource.TagList[].Value - leaks credential, sensitive_data, pii
DescribeClusterParameters.Parameters[].ParameterValue - leaks credential, password, connection_string, sensitive_data
DescribeTags.TaggedResources[].Tag.Value - leaks credential, sensitive_data
redshift-data:DescribeStatement.QueryString - leaks credential, password, sensitive_data
GetProfile.profile.sessionPolicy - leaks credential, sensitive_data
ListTagsForResource.tags[].value - leaks credential, sensitive_data
GetHealthCheck.HealthCheck.HealthCheckConfig.SearchString - leaks credential, api_key, sensitive_data
ListTagsForResource.ResourceTagSet.Tags[].Value - leaks credential, sensitive_data
CloudWatch Logs Route 53 query log event.message - leaks pii, sensitive_data, credential
GetBucketPolicy.Policy - leaks credential, sensitive_data, pii
GetBucketTagging.TagSet[].Value - leaks credential, sensitive_data
GetObjectTagging.TagSet[].Value - leaks credential, sensitive_data, pii
HeadObject.Metadata.<value> - leaks credential, api_key, sensitive_data, pii
GetBucketWebsite.RoutingRules[].Redirect.ReplaceKeyWith / Redirect.HostName - leaks credential, api_key, sensitive_data