learn more

Millions of organizations use cloud solutions like Amazon AWS and Microsoft Azure to store their most sensitive data. Unfortunately, these services are surprisingly difficult to secure properly. As a result, billions of private records are accidentally made public by organizations that have no idea they are sharing this data with the world. Sky Witness volunteers scour the web for exposed private information and attempt to locate and notify data owners so they can do the right thing to protect their customers, employees, and businesses.

We Find Data Where It Does Not Belong

Sky Witness

read more →

info@skywitness.org

Contact Us

SkyWitness is a registered 501(c)(3) nonprofit.

Common Good

We do not sell any product or service whatsoever.

100% Free

Chances are you’ve found us because you’ve received a disclosure notice about data you’re responsible for and you want to see what we’re about. Cool. Welcome, we’re here to help. Head on over to our Disclosure FAQ, which will hopefully answer any questions you may have.

Otherwise, If you’re a security researcher or interested bystander feel free to peruse our tradecraft blog, disclosure log or other portions of this site.

How to use this site

And on so it happened that on the second Wednesday of the Feast of the Shareholder, in the time of The Third Cloud Migration, the face of Admin moved across the storage blob and spoke thusly: “Try it now, – It works for me.” And so it did work, but lo, it worked for all. […]

The Great Clusterfuck in the Sky

SkyWitness News

Abstracted/Redacted disclosure logs from 2023 will begin ‘Decrypting’ on July 10, 2024. as we make them suitable for public consumption.

Disclosure Log IV : A New Trope

Disclosure Log

Abstracted/Redacted disclosure logs from 2023 will begin ‘Decrypting’ on July 10, 2024. as we make them suitable for public consumption.

Disclosure Log III : This Time It’s PII

Disclosure Log

Abstracted/Redacted disclosure logs from 2023 will begin ‘Decrypting’ on July 10, 2024. as we make them suitable for public consumption.

Disclosure Log II : Electric Boogaloo

Disclosure Log

Abstracted/Redacted disclosure logs from 2023 will begin ‘Decrypting’ on July 10, 2024. as we make them suitable for public consumption.

Disclosure Log I : A Sequel to the Prequel

Disclosure Log

Recent Posts