Reykur BlogField notes from the
Field notes from the
frontier of product security.
Research, product thinking, and stories from the trenches of building continuous product security for the AI-era SDLC.
All posts2 posts
- Latest
4,500 websites leaked their source code in 2024. Here's how many still do in 2026.
In 2024, Truffle Security counted 4,500 top-1M websites exposing their .git directory. We re-ran the measurement in 2026: 3,618 sites still serve theirs. Same bug, same one-line fix, fifteen years on.
Read the post
Your AI coding assistant is quietly shipping your secrets
AI coding agents are leaving a new kind of paper trail in your codebase — configuration files, logs, and helper artifacts that were never meant to leave your laptop.
Read the post
Get early access
Be among the first to try Reykur and help shape continuous product security.
No spam. We'll only email you about Reykur.