Demo on recorded data — get early access
FindingsCritical1Medium6Low3Info3Sign out

Findings

13 findings · run finished 2026-09-12 06:04Z · worst first

CriticalNewAccess keys minted across users in a burstpart of case k/cbfca6f4bf851234567890120d
observed on synthetic accountsV-004 · f/5VA7vrDB4E · t/4b1c9e0a-1234-4abc-8def-0123456789ab
MediumAccess key minted on another usersandbox · eu-central-1‹generated-workload-23› +5161d
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access key minted on another user on generated-workload-23 in eu-central-1 (account 345678901234): first seen 161 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-004 · f/95WftKfNAF · e/QRSTUVWXYZab e/XYZabcdefghi e/efghijkmnopq +6
MediumAccess key minted on another user234567890123 · eu-central-1‹generated-workload-73› +6151d
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access key minted on another user on generated-workload-73 in eu-central-1 (account 234567890123): first seen 151 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-004 · f/CFXkn5tQvF · e/abcdefghijkm e/123456789ABC e/89ABCDEFGHJK +2
MediumAccess key minted on another userprod-acct · eu-central-1‹generated-workload-63› +381d
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access key minted on another user on generated-workload-63 in eu-central-1 (account 123456789012): first seen 81 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-004 · f/AgFoTMag59 · e/QRSTUVWXYZab e/XYZabcdefghi e/efghijkmnopq +1
MediumAccess key minted on another usersandbox · eu-central-1‹generated-workload-113› +471d
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access key minted on another user on generated-workload-113 in eu-central-1 (account 345678901234): first seen 71 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-004 · f/F4sHUGvTHN · e/abcdefghijkm e/123456789ABC e/89ABCDEFGHJK +6
MediumAccess key minted on another userprod-acct · eu-central-1‹generated-workload-33› +851d
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access key minted on another user on generated-workload-33 in eu-central-1 (account 123456789012): first seen 51 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-004 · f/GfmbB7AHbU · e/abcdefghijkm e/123456789ABC e/89ABCDEFGHJK +7
MediumAccess key minted on another user234567890123 · eu-central-1‹generated-workload-103› +81d
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access key minted on another user on generated-workload-103 in eu-central-1 (account 234567890123): first seen 1 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-004 · f/7rNaK68Eqg · e/QRSTUVWXYZab e/XYZabcdefghi e/efghijkmnopq +5
LowAccess key minted on another user234567890123 · eu-central-1‹generated-workload-43› +4121d
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access key minted on another user on generated-workload-43 in eu-central-1 (account 234567890123): first seen 121 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-004 · f/9arjj6K8xM · e/456789ABCDEF e/BCDEFGHJKLMN e/JKLMNPQRSTUV +8
LowAccess key minted on another usersandbox · eu-central-1‹generated-workload-83› +941d
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access key minted on another user on generated-workload-83 in eu-central-1 (account 345678901234): first seen 41 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-004 · f/B1xDU9W4A4 · e/456789ABCDEF e/BCDEFGHJKLMN e/JKLMNPQRSTUV +3
LowAccess key minted on another userprod-acct · eu-central-1‹generated-workload-3› +621d
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access key minted on another user on generated-workload-3 in eu-central-1 (account 123456789012): first seen 21 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-004 · f/E7Xtx9Cehz · e/456789ABCDEF e/BCDEFGHJKLMN e/JKLMNPQRSTUV +4
InfoAccess key minted on another userprod-acct · eu-central-1‹generated-workload-93› +5111d
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access key minted on another user on generated-workload-93 in eu-central-1 (account 123456789012): first seen 111 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-004 · f/GMskVvih1C · e/EFGHJKLMNPQR e/MNPQRSTUVWXY e/UVWXYZabcdef +4
InfoAccess key minted on another user234567890123 · eu-central-1‹generated-workload-13› +991d
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access key minted on another user on generated-workload-13 in eu-central-1 (account 234567890123): first seen 91 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-004 · f/7fz68kAfKY · e/EFGHJKLMNPQR e/MNPQRSTUVWXY e/UVWXYZabcdef +5
InfoAccess key minted on another usersandbox · eu-central-1‹generated-workload-53› +711d
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access key minted on another user on generated-workload-53 in eu-central-1 (account 345678901234): first seen 11 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-004 · f/FMc9nYTPDJ · e/EFGHJKLMNPQR e/MNPQRSTUVWXY e/UVWXYZabcdef +9