Shopify launches Overexposed scanner to detect exposed GKE and Cloud Run services
The new tool uses Google Cloud Asset Inventory and anonymous probes to move beyond configuration-only checks that miss real-world enforcement.
Shopify has introduced an internal security tool called Overexposed designed to find Kubernetes Ingresses on Google Kubernetes Engine (GKE) and Cloud Run services accessible from the internet without authentication. The scanner was rebuilt after its first version produced too many…