Exposure DB
1,048 exposure sites - every place a customer-controlled credential or secret can leak - each mapped to the edge it emits, its collection recipe, and what leaks.
406
aws
377
azure
265
gcp
563
critical severity
250
medium severity
233
high severity
2
low severity
Microsoft.ServiceBus/namespaces.tags.* - leaks credential, api_key, sensitive_data, pii
Microsoft.ServiceFabric/clusters/applications.properties.parameters.* - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string
Microsoft.ServiceFabric/clusters.properties.{certificate,certificateCommonNames,clientCertificateThumbprints,clientCertificateCommonNames} - leaks certificate, sensitive_data
Service Fabric events and health information descriptions - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data
Microsoft.ServiceFabric/clusters.tags.* - leaks credential, api_key, sensitive_data, pii
Service Fabric service/application manifest configuration and environment overrides - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, source_code_secret
Microsoft.Sql/servers.properties.administratorLoginPassword - leaks credential, password, database_credential
SQL audit records and AzureDiagnostics properties - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data
TDS sys.sql_modules.definition and job/agent command text - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, source_code_secret
Microsoft.Sql/managedInstances.properties.administratorLoginPassword - leaks credential, password, database_credential
Microsoft.Sql/servers.tags.* - leaks credential, api_key, sensitive_data, pii
Microsoft.Sql servers/databases/vulnerabilityAssessments scans results - leaks sensitive_data
Microsoft.Web/staticSites/config/appsettings properties.* - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string
Static Web Apps build and deployment log content - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data
staticwebapp.config.json routes, navigationFallback, auth and responseOverrides - leaks credential, api_key, sensitive_data
Microsoft.Web/staticSites.tags.* - leaks credential, api_key, sensitive_data, pii
Microsoft.Storage/storageAccounts.tags.* - leaks credential, api_key, sensitive_data, pii
Microsoft.Resources/subscriptions/resourceGroups.tags.* - leaks credential, api_key, sensitive_data, pii
ARM generic resource.tags.* - leaks credential, api_key, sensitive_data, pii
Microsoft.Resources/subscriptions.{displayName,subscriptionPolicies,tenantId,tags} - leaks sensitive_data
Synapse linkedService.properties.typeProperties - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string
Synapse notebook.properties.{cells,metadata,bigDataPool,sessionProperties} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, source_code_secret, sensitive_data, pii, customer_data
Synapse pipeline.properties.{parameters,variables,activities} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, source_code_secret
Synapse pipeline activity run.{input,output,error} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data
Microsoft.Synapse/workspaces.tags.* - leaks credential, api_key, sensitive_data, pii
Synapse Spark job definition properties.{jobProperties,targetBigDataPool,files,arguments} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, source_code_secret
Microsoft.Compute/virtualMachines.properties.osProfile.adminPassword - leaks credential, password
Microsoft.Compute/virtualMachines/retrieveBootDiagnosticsData.serialConsoleLogBlobUri - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data
Microsoft.Compute/virtualMachines/extensions.properties.protectedSettings - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string
Microsoft.Compute/virtualMachines/extensions.properties.settings - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, source_code_secret
Microsoft.Compute/virtualMachines.properties.osProfile.customData - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, source_code_secret
Microsoft.Compute/virtualMachines.tags.* - leaks credential, api_key, sensitive_data, pii
Microsoft.Compute/virtualMachines/runCommands.properties.instanceView.{output,error,executionMessage} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data
Microsoft.Compute/virtualMachines/runCommands.properties.{protectedParameters,runAsPassword} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string
Microsoft.Compute/virtualMachines/runCommands.properties.{source.script,parameters,outputBlobUri,errorBlobUri} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, source_code_secret
Microsoft.Compute/virtualMachines.properties.userData - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, source_code_secret
Microsoft.Compute/virtualMachineScaleSets.properties.virtualMachineProfile.extensionProfile.extensions[].properties.protectedSettings - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string
Microsoft.Compute/virtualMachineScaleSets.properties.virtualMachineProfile.extensionProfile.extensions[].properties.settings - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, source_code_secret
Microsoft.Compute/virtualMachineScaleSets/virtualMachines.instanceView.extensions[].statuses[].message - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data
Microsoft.Compute/virtualMachineScaleSets.properties.virtualMachineProfile.osProfile.adminPassword - leaks credential, password
Microsoft.Compute/virtualMachineScaleSets.properties.virtualMachineProfile.osProfile.customData - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, source_code_secret
Microsoft.Compute/virtualMachineScaleSets.properties.virtualMachineProfile.userData - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, source_code_secret
Microsoft.Compute/virtualMachineScaleSets.tags.* - leaks credential, api_key, sensitive_data, pii
Microsoft.Network/routeTables/routes.properties.{addressPrefix,nextHopIpAddress} and tags - leaks sensitive_data
Microsoft.Network/virtualNetworks/virtualNetworkPeerings.properties.{remoteVirtualNetwork,remoteAddressSpace,remoteVirtualNetworkAddressSpace} - leaks sensitive_data
Microsoft.Network/virtualNetworks/subnets.properties.{serviceEndpoints,serviceEndpointPolicies,delegations,ipAllocations} - leaks sensitive_data
Microsoft.Network/virtualNetworks.tags.* - leaks credential, api_key, sensitive_data, pii
Microsoft.Network/virtualWans.tags.* - leaks credential, api_key, sensitive_data, pii
Microsoft.Network/vpnSites.properties.{addressSpace,deviceProperties,siteKey,vpnSiteLinks} - leaks sensitive_data
accesscontextmanager.accessPolicies.accessLevels.get.{basic.conditions[],custom.expr.{expression,title,description}} - leaks pii, sensitive_data