Security & Privacy
Popular
Web Application Penetration Test
A hands-on penetration test of your web application, with evidence for every finding and a free retest after you fix the issues.
₹32,999
Security & Privacy
OB-SEC-105
Leaked Secrets Clean-Up
We find passwords and keys leaked in your code repositories, rotate them, and set up scanning so new leaks are blocked.
- Timeline
- 6 working days
- Deliverables
- 7 listed
- Fixed price
- ₹13,999
What this service delivers
Unscanned code usually hides at least one live password or key deep in its commit history, and deleting the file does not remove it from older commits. We scan the full history of your repositories, check which secrets are still live and plan a safe rotation order. Dependencies are checked too: packages with known vulnerabilities are listed, and automated scanning is added to catch the next issue when a pull request is opened.
Deliverables 7 items
What you receive
- Full history scan of up to 20 code repositories
- Live credentials confirmed and prioritised for rotation
- Secrets moved into a managed secret store
- Dependency vulnerability report with a practical upgrade order
- Pre-commit hooks and pipeline scanning to block future leaks
- Automated dependency update tool configured with sensible grouping
- Short written guide on handling secrets for your team
How the work runs, in 4 steps
-
Step 1: Scan
Repository histories and dependencies are scanned
-
Step 2: Verify
Findings are checked to separate live secrets from false alarms
-
Step 3: Rotate
Live credentials are replaced in a safe order with your team
-
Step 4: Prevent
Scanning and hooks are switched on and the guide is shared
Who it suits, and what we need from you
Ideal for
- Teams that have never scanned their repository history
- Organisations about to give contractors access to private code
- Anyone whose dependency updates have been on hold for over a year
What we need from you
- Read access to all repositories in scope, including archived ones
- Someone who can rotate credentials in each connected service
- A short window to rotate anything production depends on
You share these through the brief in your account after checkout.
What changes for your team
-
01
Live credentials removed from code where they should never have been
-
02
Vulnerable dependencies identified with a clear upgrade path
-
03
Future secrets blocked before they are committed
Questions about this service
Rotation is the real fix, because a rotated key is useless even if it remains in history. History rewriting can be done if you want it, after discussion.
We use open-source or built-in options by default. If you prefer a paid tool, we can configure that instead.
This is a remote technology service, so nothing is shipped physically. Work is delivered into systems you control. Read delivery and handover and refunds and cancellation for the full terms.