Glossary: Security Operations and Incident Response

.env file

Also written: .env, /.env

A file where many web applications keep passwords and keys. Attackers' scripts ask every website for /.env, so a request for it in a web log is a probe, and a 200 reply would mean the secrets leaked.