---
title: "Secrets  "
url: "https://docs.indusface.com/en/article/secrets"
language: "en"
last_updated: "2025-11-25T12:04:18.859Z"
---

# Secrets  

This dashboard helps security teams monitor and manage the exposure of hard-coded secrets and credentials across digital assets. 

## Accessing Secrets tabs

-   Login to WAS Portal
-   Navigate to **Vulnerabilities** and click **Secrets** Tab

![](https://cdn-assets.productfruits.com/6d404005-8b6d-4a12-aca3-a7a837a457e7)

## Overview Section

**Total Secret Scan**

This section provides a summary of the scanned secrets, showing the total number of secrets scanned, broken down into:

-   **Completed**: The number of scans that have been fully processed and evaluated.
-   **In Progress**: The number of scans that are still being processed.

![](https://cdn-assets.productfruits.com/a538a239-770d-45c9-afb7-600c18152f17)

**Secrets Identified**  
Displays the total number of secrets (such as API keys, passwords, tokens) identified across the scanned assets. These are potentially sensitive data that could be exposed or leaked.

![](https://cdn-assets.productfruits.com/7a1045be-bff2-44d6-9c2a-8df8a03ca7d7)

**Open and Closed Secrets Over Time**

  
A graphical representation showing how secrets are categorized as "Open" (identified but not resolved) and "Closed" (resolved or removed) over time. This helps track the progress of managing and addressing security risks related to exposed secrets.

![](https://cdn-assets.productfruits.com/e888181b-2ed1-46df-9326-606f5bfa332e)

**Asset Details** 

The table displays detailed information about each secret identified:

![](https://cdn-assets.productfruits.com/60d840f7-30f8-4286-8c1a-7eb9af258414)

| **Column Name** | **Description** |
| --- | --- |
| **Subdomain** | The subdomain where the secret was found. |
| **Masked Secret Value** | The actual secret value with part of it masked (for security reasons). |
| **Found On** | The date when the secret was first detected during the scan. |
| **Action** | Available action that can be taken on the identified secret.<br>**Details**: This button allows you to view more detailed information about the secret and its associated risks. |

## Asset Control and Filter Options

**Display Options**:

A control that allows users to select how many rows of data they want to view at once. 

![](https://cdn-assets.productfruits.com/f6223fb9-1967-462d-ac75-134083aae0b3)

**Filter by Secrets**

A **filter dropdown** is available to **view all secrets** or select a **specific secret.** This allows users to focus on particular secrets and their respective urls.

![](https://cdn-assets.productfruits.com/85d665e7-88bc-4483-b7a4-310f6834bf00)

**All-Domain**

Use **All-Domain** to download a combined report for all domains.

![](https://cdn-assets.productfruits.com/0e651a06-48f6-42ce-bc7d-98a60c706023)

**Search**

A search bar to help users quickly find specific assets, secrets, or vulnerabilities by entering keywords or filters (e.g., subdomains, severity level).

 ![](https://cdn-assets.productfruits.com/62126a12-e7be-41a3-b5d3-abaf901e1db9)

## Add Website

> If a sub-domain is not onboarded in WAS, the user cannot view the secrets identified for that asset. To access those findings, the asset must first be onboarded using the **Add Site** option.

Click the Add Website icon under Action to onboard a new application or API.

![](https://cdn-assets.productfruits.com/8f586eab-65d1-4b8d-ad24-5d567f7a76ea)

The Add website window will pop up

![A screenshot of a computer  AI-generated content may be incorrect.](https://cdn-assets.productfruits.com/350c2762-f383-42d1-a94b-fb6dce35d652)

[**Click here**](https://docs.indusface.com/en/article/was-consulting-license) for a step-by-step guide to self-onboard your applications or APIs for secret scanning