Home▸Cybersecurity▸Secret Exposure Window: Detection-to-Rotation Race

Secret Exposure Window: Detection-to-Rotation Race

Interactive 3D model of the race between an attacker discovering a leaked credential and an automated CI/CD pipeline detecting and rotating it — tune the entropy threshold, scan interval, rotation SLA and attacker discovery rate and watch commits flow through a live secrets-scanning gate.

Cybersecurity3DModerate60 FPS

A live commit stream flows through a CI/CD pipeline. Each commit is scored by Shannon entropy; commits above the flag threshold are treated as potential leaked secrets. From the moment a real secret lands in the repository, an attacker-discovery clock and an automated rotation clock race each other — both modeled as independent exponential (Poisson) processes — and whichever fires first decides whether the credential is safely rotated or actually breached. Tune the detection threshold, scan cadence, rotation SLA and attacker discovery rate to see how each one shifts the balance between false positives, missed leaks, and real-world exposure risk.

⚙ Under the hood

An interactive 3D model of leaked-credential risk: commits stream through an entropy-based secrets scanner, and each real leak triggers a race between an attacker's discovery clock and the CI/CD pipeline's automated rotation clock.

secrets scanningentropy detectioncredential rotationCI/CD securityincident response

3D · Three.js / WebGL renderer · 60 FPS target · runs fully client-side, no install