Cyber Defence
Manual Web Security Test
Hands-on security testing of your web application with proof-of-concept evidence for every finding and a free retest after you fix issues.
Fixed price · GST incl.₹32,999
Cyber Defence
Leaked Secrets Clean-Up
We find credentials hidden in your code repositories, rotate them safely and add scanning so new secrets are blocked before they are committed.
6 working days₹13,999 incl. GST7 deliverables
What this service covers
An unscanned codebase almost always contains a live credential somewhere in its history, and deleting the file does not remove it from past commits. We scan the full history of up to 20 repositories, check which secrets are still live and plan a safe rotation order, moving them to a managed vault. Dependencies get the same attention: outdated packages with known vulnerabilities are listed with a practical upgrade order. Finally, pre-commit hooks, pipeline scanning and a bot for automatic dependency updates are set up, so the next leak is stopped before review, and your team gets a short guide on handling secrets.
What you receive
- Full version history scanned across up to 20 repositories
- Live credentials verified and ranked for rotation
- Secrets moved to a managed vault
- A report of vulnerable dependencies with a realistic upgrade order
- Pre-commit hooks and pipeline scanning to block new leaks
- A bot for automatic dependency updates, configured with sensible grouping
- A short written secrets-handling guide for your team
The work in 4 stages
-
Stage 1: Sweep
Full history and live branches are searched for credentials.
-
Stage 2: Confirm
Every hit is checked to see if it still works.
-
Stage 3: Replace
Credentials are rotated in an order that avoids downtime.
-
Stage 4: Guard
Scanning, hooks and automatic updates are installed.
Who it suits, and what we need from you
Ideal for
- Teams that have never audited their repository history
- Businesses about to give contractors access to private code
- Anyone who has left packages un-updated for twelve months or longer
What we need from you
- Read access to all in-scope repositories, including archived ones
- Someone able to rotate credentials in each connected service
- A short window to rotate credentials production depends on
You share these through the brief on your order page after checkout.
What changes for your team
- Live credentials cleared from code where they never belonged
- Vulnerable dependencies identified, with an upgrade path
- Future accidental secrets blocked before they leave a developer's machine
Questions about this service
Yes, but rewriting history disrupts every existing clone. Rotating the credential is usually better, and we will explain the reasoning for your case.
Assume it is compromised and rotate it at once. We deal with these first, on day one.
Yes, including mirrors for the common JavaScript, PHP and Python package managers, provided you give us access.
This is a remote service: nothing is shipped physically, and the work is delivered into systems you control. See delivery and handover and refunds and cancellation for the full terms.