Exposure DB
1,048 exposure sites - every place a customer-controlled credential or secret can leak - each mapped to the edge it emits, its collection recipe, and what leaks.
406
aws
377
azure
265
gcp
563
critical severity
250
medium severity
233
high severity
2
low severity
Microsoft.Cdn/profiles/originGroups/origins.properties.{hostName,originHostHeader,sharedPrivateLinkResource} - leaks sensitive_data
Microsoft.Cdn/profiles.tags.* - leaks credential, api_key, sensitive_data, pii
Microsoft.Cdn/profiles/ruleSets/rules.properties.actions[].parameters.{headerName,value} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string
Microsoft.Cdn/profiles/secrets.properties.parameters.{certificate,keyVaultCertificateSourceParameters} - leaks credential, private_key, certificate
Microsoft.Web/sites/config/appsettings.properties.* - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string
Microsoft.Web/sites/config/connectionstrings.properties.*.{value,type} - leaks credential, password, connection_string, database_credential
Microsoft.Web/sites log stream and diagnostic log content - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data
Microsoft.Web/sites/functions.properties.{config,files,script_href,test_data_href} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, source_code_secret, sensitive_data
Microsoft.Web/sites.tags.* - leaks credential, api_key, sensitive_data, pii
Microsoft.Web/sites.properties.siteConfig.{appCommandLine,linuxFxVersion,windowsFxVersion,metadata} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, source_code_secret
Microsoft.Web/sites/slots/config/appsettings.properties.* - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string
Key Vault CertificatePolicy.{issuerParameters,subject,subjectAlternativeNames,x509CertificateProperties} - leaks certificate, pii, sensitive_data
Microsoft.KeyVault/vaults.tags.* - leaks credential, api_key, sensitive_data, pii
Key Vault Secret.{contentType,tags} - leaks credential, api_key, sensitive_data, pii
Microsoft.ManagedServices/registrationAssignments.properties.{registrationDefinitionId,registrationDefinition,provisioningState} - leaks sensitive_data
Microsoft.ManagedServices/registrationDefinitions.properties.{authorizations,eligibleAuthorizations,managedByTenantId,description} - leaks sensitive_data
Microsoft.Network/applicationGateways.properties.authenticationCertificates[].properties.data - leaks certificate, sensitive_data
Microsoft.Network/applicationGateways.properties.sslCertificates[].properties.{data,password} - leaks credential, password, private_key, certificate
Microsoft.Network/applicationGateways.tags.* - leaks credential, api_key, sensitive_data, pii
Application Gateway access, firewall, and performance log records - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data
Microsoft.Network/loadBalancers.tags.* - leaks credential, api_key, sensitive_data, pii
Microsoft.Network/loadBalancers/probes.properties.{requestPath,host} - leaks credential, api_key, sensitive_data
Microsoft.Network/applicationGateways.properties.rewriteRuleSets[].properties.rewriteRules[].actionSet.*.headerValue - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string
Microsoft.OperationalInsights/workspaces.tags.* - leaks credential, api_key, sensitive_data, pii
Microsoft.OperationalInsights/workspaces/savedSearches.properties.{query,displayName,category,tags} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data
Microsoft.SecurityInsights/automationRules properties.{triggeringLogic,actions,displayName} - leaks credential, webhook_secret, sensitive_data
Microsoft.SecurityInsights/incidents/comments properties.message - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data
Microsoft.SecurityInsights/incidents properties.{title,description,additionalData,relatedAnalyticRuleIds,providerIncidentId} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data
Microsoft.Web/connections.properties.parameterValues and customParameterValues - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, oauth_token
Microsoft.Logic/workflows.tags.* - leaks credential, api_key, sensitive_data, pii
Microsoft.Logic/workflows/runs/actions properties.{inputsLink,outputsLink,error} referenced content - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data
Microsoft.Logic/workflows/triggers/histories properties.{inputsLink,outputsLink,error} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data
Microsoft.Logic/workflows.properties.definition - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, source_code_secret
Microsoft.Logic/workflows.properties.parameters.*.value - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string
Azure ML code asset referenced storage content - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, private_key, source_code_secret
Microsoft.MachineLearningServices/workspaces/onlineEndpoints/deployments.properties.environmentVariables.* - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string
Microsoft.MachineLearningServices/workspaces/jobs.properties.{command,environmentVariables,parameters,inputs,outputs} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, source_code_secret
Azure ML job services, logs, outputs, and artifacts - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data
Azure ML workspace file/notebook content - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, source_code_secret, sensitive_data, pii, customer_data
Microsoft.MachineLearningServices/workspaces.tags.* - leaks credential, api_key, sensitive_data, pii
Managed HSM Full Backup request.azureStorageBlobContainerUri - leaks credential, session_token, connection_string
Managed HSM Key backup response.value - leaks encryption_key_material, sensitive_data
Managed HSM KeyBundle.{key.kid,key.key_ops,tags} - leaks sensitive_data, pii
Microsoft.KeyVault/managedHSMs.tags.* - leaks credential, api_key, sensitive_data, pii
Microsoft.ManagedIdentity/userAssignedIdentities/federatedIdentityCredentials.properties.{issuer,subject,audiences} - leaks sensitive_data
Microsoft.ManagedIdentity/userAssignedIdentities.{properties,tags} - leaks sensitive_data
Microsoft.ManagedIdentity/userAssignedIdentities.tags.* - leaks credential, api_key, sensitive_data, pii
Microsoft.Management/managementGroups.properties.{displayName,details,parent,children} - leaks sensitive_data
Microsoft.Management/managementGroups/descendants[].{name,type,properties.displayName,parent} - leaks sensitive_data
Microsoft.Management/managementGroups.tags.* - leaks credential, api_key, sensitive_data, pii