Executive Summary
GitGuardian's 2026 State of Secrets Sprawl Report says AI-assisted commits leak secrets at about twice the rate of human-written ones, and most fast-growing leaked credential types are tied to AI.
What Happened
AI coding agents are changing how quickly developers can build and ship software as well as how quickly credentials can become exposed. According to GitGuardian’s 2026 State of Secrets Sprawl Report, commits identified as AI-assisted are leaking secrets at approximately twice the rate of human-written ones. Most of the fastest-growing categories of leaked credentials are now connected to AI
Vulnerability / Attack Technique
Secrets leaked through AI-assisted code
Technical Mechanism
AI coding agents produce commits that include credentials more often than human-written code.
AI Security Category
LLM02:2025 Sensitive Information Disclosure
Relevant Frameworks
RealGround Analysis
Faster coding means faster leaks. RealGround analysis: secret scanning needs to run on agent commits before they are pushed.
Recommended Controls
- Run pre-commit secret scanning on agent-generated code
- Give coding agents no direct access to secrets
Related RealGround Service
AI Security Readiness Assessment · or start with the free AI Agent Security Scanner.
Sources
thehackernews.com: https://thehackernews.com/2026/09/secrets-sprawl-is-identity-problem-that.html
Summary and analysis written by RealGround from the source above; last updated 2026-10-17.