Tiny little birds!

In this talk, I am going to talk about canary tokens: digital tripwires that help protect company's assets and infrastructure. This involves going into the depth of an incident, and how canary tokens saved the day. This talk draws upon a recent incident at Grafana that could have caused severe reputational damage, which was quickly prevented.

The topics are:
1. What are canary tokens?
* Building your canary token infrastructure
* Canary token lifecycle
2. Canary tokens and TruffleHog to the Rescue!
3. Canary tokens placement strategies
4. Incident response strategies
* Zizmor and other linters
* Gato-X
* Secret storage
5. Conclusion
6. Q&A

The talk is based on this article: https://grafana.com/blog/2025/08/25/canary-tokens-learn-all-about-the-unsung-heroes-of-security-at-grafana-labs/

How do you know you are compromised?

GatewayD: Like API gateways, for databases!

GatewayD is a cloud-native database gateway and framework for building data-driven applications. It is like API gateways, but for databases.

In this session, I'll go through the current problems present in today's databases, and how GatewayD is going to solve those problems. It will also includes a demo of how GatewayD works using the cache plugin.