Case Study: Lemontech strengthens secrets security with GitGuardian

How Lemontech Protects its Secrets with GitGuardian

Lemontech, a software company for the legal industry, faced a security challenge after an employee accidentally leaked an AWS API key on GitHub, which was immediately exploited for crypto-mining. This incident highlighted their vulnerability to secrets exposure and the need for a solution to prevent hard-coded secrets from being committed to their code repositories. They turned to the vendor GitGuardian for its secrets detection service.

GitGuardian implemented a solution that scans for secrets at the pull request level and integrates natively with GitHub, keeping engineers in their workflow. The platform also allows for historical analysis and sends Slack alerts for detected leaks. As a result, Lemontech drastically reduced hard-coded secrets in commits, achieved ISO27001 certification, and built a strong, blameless security culture. The CTO reported a clear return on investment and praised the peace of mind GitGuardian provides as an essential last line of defense.

Lemontech

Ezequiel Rabinovich

Chief Technology Officer