Abstract: Aspects of the disclosure provide for an end-to-end system for detecting and responding to known secrets leaked on a computing platform. By securely retrieving secret data from a repository of known secrets, the platform can detect whether potential secrets are leaked in digital documents generated by applications or services of the platform, and compare the potential secrets with known secrets in the repository. The system deterministically and accurately identifies whether secrets were leaked in a digital document, and can also identify both the source of the leakage and the affected users, devices, or groups of users and devices on the platform.

Abstract: Aspects of the disclosure provide for an end-to-end system for detecting and responding to known secrets leaked on a computing platform. By securely retrieving secret data from a repository of known secrets, the platform can detect whether potential secrets are leaked in digital documents generated by applications or services of the platform, and compare the potential secrets with known secrets in the repository. The system deterministically and accurately identifies whether secrets were leaked in a digital document, and can also identify both the source of the leakage and the affected users, devices, or groups of users and devices on the platform.