Duo Keys

Description

General

• Documentation: https://duo.com/docs/authapi
• Summary: Duo is a company providing a RESTful API for adding strong two-factor authentication to an application. This detector aims at catching the Duo keys (integration key, secret key, and API hostname) used to access this API.

Revoke the secret

Duo keys can be revoked in the Duo Admin Panel (https://admin.duosecurity.com/).

Details for Duo Keys

• Family: credentials

• Category: identity_provider

• Company: Duo

• High recall: False

• Validity check available: True

• Analyzer available: False

• On-premise instances exist: False

• Only valid secrets raise an alert: False

• Minimum number of matches: 3

• Occurrences found for one million commits: 0.11

• Prefixed: False