HomeCybersecuritySecret Exposure Window: Detection-to-Rotation Race

Secret Exposure Window: Detection-to-Rotation Race (2D)

Interactive 2D model of the race between an attacker discovering a leaked credential and an automated CI/CD pipeline detecting and rotating it — a live stochastic timeline plus a Monte Carlo mode computing the empirical exploitation-probability distribution as detection and rotation speed change.

Cybersecurity2DModerate60 FPS📱 Mobile-adapted⇄ 3D version
2d-cybersec-topic-45 ↗ Open standalone

A live commit stream flows through a CI/CD pipeline. Each commit is scored by Shannon entropy; commits above the flag threshold are treated as potential leaked secrets. From the moment a real secret lands in the repository, an attacker-discovery clock and an automated rotation clock race each other — both modeled as independent exponential (Poisson) processes — and whichever fires first decides whether the credential is safely rotated or actually breached. Switch to Monte Carlo mode to run thousands of independent trials at once and see the empirical exploitation-probability distribution, compared against the closed-form race formula, as you tighten detection and rotation SLAs.

⚙ Under the hood

An interactive 3D model of leaked-credential risk: commits stream through an entropy-based secrets scanner, and each real leak triggers a race between an attacker's discovery clock and the CI/CD pipeline's automated rotation clock.

secrets scanningentropy detectioncredential rotationCI/CD securityincident response

2D · HTML5 Canvas 2D · 60 FPS target · runs fully client-side, no install

What did you find?

Add reproduction steps (optional)