---
name: secrets-and-data-protection
description: Find exposed secrets and review sensitive-data collection, storage, logging, and transmission.
---

# Secrets and Data Protection

Check hard-coded credentials, leaked environment values, client bundles, logs, analytics, backups, database access, encryption, retention, redaction, and least privilege. Never print secret values. Recommend rotation, scope reduction, and safe verification.