A startup got a $47,000 AWS bill in 4 hours.

The cause? One .env file accidentally pushed to GitHub. Here's what happened in real time: 03:12 AM — dev runs git add . by mistake 03:12 AM — .env with AWS keys hits GitHub 03:15 AM — bots scan GitHub, find the keys 03:16 AM — 47 EC2 instances start mining crypto 07:00 AM — dev wakes up to a $47,000 bill This happens every single week to real teams. I built VaultWatch to stop this permanently: → Pre-commit hook blocks .env before it hits GitHub → Encrypted team vault for all secrets → Instant alert if anything leaks Early access open now.