10/22/2026
Your AI assistants leave credentials on disk, in well-known locations. An infostealer only has to copy one.
Darryl Baker, CISSP, CEH, CCSP, ..., Senior Staff Security Researcher at Netwrix, introduces AIHound in his Innovation Week blog: a free, open-source scanner that runs on your machine and finds the API keys, OAuth tokens, and other credentials your AI assistants leave behind.
Most of the tools he looked at left a clear text credential on the user’s machine, and Trend Micro’s analysis of more than 19,000 MCP servers found that 48% recommend storing secrets in .env files or plaintext JSON.
AIHound scores each finding by criticality and redacts credential values by default. The download is a small binary, and a scan takes seconds.
Watch the replay of the session: https://netwrix.com/en/resources/blog/netwrix-innovation-week-intro-to-aihound/