Security Global Overview

Security overview

One live trust break needs containment, two concentration hotspots widen company consequence, and two blind spots are slowing confident response.

This page is the first-contact view for security. It should say what matters now, where risk is clustering, what changed since the last scan, and which drill path reduces uncertainty fastest.

Operator Brief

Needs review

2 urgent concerns · 3 hotspots · 3 unknown entities · 2 exposure paths

Hotspots

3 hotspots

Credential reuse, sensitive auth code touch, and a plain HTTP edge are carrying most of the consequence.

Unknown Entities

3 entities

One key, one endpoint, and one owner chain are not confidently identified yet.

Touchpoints

5 surfaces

A small set of repos, files, and execution surfaces explain why the story matters.

Exposure Paths

2 paths

Two paths show how concern may leave, spread, or cross a boundary.

Fastest Next Click

Resolve the unknown credential first. It’s the fastest containment decision and the cleanest pivot into the rest of the story.

Open API key story

Critical Concerns

Each concern should be one sentence plus one obvious next click.

urgentconfidence: medium-high

Unknown credential remains active inside a live coding session.

An unowned key is still in use, and it is already adjacent to auth-service work.

Evidence: sk-ant-...C001 · active session · auth-service touch

Open API key story

warningconfidence: medium

Sensitive code touch is paired with a plain HTTP edge.

A session touched auth-related code and then crossed into an unencrypted destination.

Evidence: /src/auth.ts · 10.0.2.15:8080 · http · same window

Open exposure paths

Hotspots

Open in inventory

Credential reuse hotspot

One unknown key appears across multiple high-consequence surfaces.

trust

Resolve the key and ownership chain first to collapse the blast radius.

Open hotspots

Auth-service hotspot

A small set of auth-related files and repos carry most of the consequence.

context

See the exact touchpoints before deciding whether to contain.

Open touchpoints

Boundary crossing hotspot

A session crossed into a plain HTTP destination after sensitive work.

boundary

Classify the destination intent and decide whether this is expected traffic.

Open exposure paths

What Changed

Only changes that alter trust, scope, or consequence belong here.

A previously unseen API key appeared in a live coding session.

The key surfaced minutes ago and is not yet tied to an approved owner record.

22m ago

A session crossed from auth-related file access into a plain HTTP destination.

Volume stayed low, but consequence rose because the boundary changed after sensitive touch.

today

A shared automation identity now spans more sensitive surfaces than before.

It may be legitimate growth, but concentration widened enough to deserve review.

today