NoCredEx
Find passwords on your file servers before an attacker does
NoCredEx is my own product. It searches shares and network drives for passwords, API keys, connection strings, private keys and much more. Credentials like these often sit in config files, scripts and old backups.
I built NoCredEx because after a break-in, attackers often search the network drives first. There they often find credentials that ended up in a file at some point and were never removed.
NoCredEx runs entirely inside your network, only reads files and installs nothing on the file servers. It is currently in quality assurance. Join the waitlist on nocredex.at to be the first to know when it is available.
Find
NoCredEx searches every share in your network, even the ones nobody remembers. More than 140 detection rules check every file along the way.
Assess
Every finding is rated by severity. You see the affected line and decide what to do.
Fix and prove it
On the next scan NoCredEx detects whether the password was removed. The dashboard shows what is open and what is done.
Features at a glance
What NoCredEx does - from finding unknown shares to alerting your SIEM.
Share discovery
Finds every share in your network, including hidden ones, folders on admin PCs and targets behind DFS namespaces.
140+ rules
Detects passwords, API keys, tokens, private keys and connection strings. You can add your own rules.
No agents
Nothing is installed on the file servers. NoCredEx only reads files and works entirely inside your network.
Scheduled scans
As a Windows service, NoCredEx checks your shares on a schedule and reads only files that have changed.
Closed automatically
Once a password is removed, the next scan closes the finding. Findings marked as false positive do not come back.
Owners
You decide who is responsible for each share. That person gets new findings via Teams, Slack or email.
Dashboard
Shows how many findings are open, how fast they are fixed and whether your deadlines are met.
SIEM and Teams
After each scan, critical findings go to your SIEM or to Teams. The password itself is never sent.
Learn more about NoCredEx
All features, frequently asked questions and the waitlist for the launch are on nocredex.at.
More details on nocredex.at