Data Exposure

Overview

Mitigate sensitive data leaks by encrypting in transit and at rest, securing secrets, and limiting exposure via caching and logging.

Learning Outcomes

• Encrypt data in transit and at rest
• Manage secrets outside of code
• Minimize and tokenize PII where possible
• Prevent leaks via caching and logs
• Redact and rotate sensitive values

Hands-on Labs

Audit a demo app for leaks, add crypto and secret management, and verify with tests.

Best Practices

Apply least data principles: collect less, store shorter, and protect everywhere.