Skip to content

Glossary: Vulnerability Management and Monitoring

hardcoded secret

Also written: hardcoded password, hardcoded secrets

A password or key typed directly into code, such as DB_PASSWORD = "Roast2026!" in the contractor's code. Bandit flags it as CWE-259.

Where the book teaches it

Related terms

Banditsource code reviewCWE