Guides

What to do when a key leaks

Step-by-step guides for revoking and replacing leaked cloud and AI API keys, and for keeping the next leak from becoming a bill.

  1. 6 min read

    API key billing spike alerts and spend caps on Google Cloud, OpenAI and Anthropic

    Budget alerts don't stop a runaway API bill. Which controls on Google Cloud, Gemini, OpenAI and Anthropic cap spend, and how to set them up.

    • billing
    • spend caps
    • google cloud
    • gemini
    • openai
    • anthropic
  2. 7 min read

    Can your Google Maps API key call Gemini? How to check and lock it down

    Public Maps and Firebase keys ran up Gemini bills in 2026. Google closed the worst of it, but some keys still reach Gemini. Check yours and lock them down.

    • google maps
    • gemini
    • google cloud
    • api keys
  3. 7 min read

    How to automatically revoke an abused API key

    Which providers revoke leaked keys for you, and how to build a kill switch on Google Cloud, OpenAI and Anthropic that disables the one key whose usage spikes.

    • api keys
    • automation
    • google cloud
    • openai
    • anthropic
  4. 7 min read

    Unexpected Gemini API bill: what happened and what to do

    A Gemini API bill spike usually means a leaked key, a loop in your code or a pricier model than you thought. Stop the spend, find the cause, ask for a refund.

    • gemini
    • google cloud
    • billing
    • incident response
  5. 9 min read

    What to do in the first hour after an API key leaks

    Revoke or restrict the key, check what it was used for, find how it got out, and limit the replacement. Steps for Google Cloud, AWS, OpenAI, Anthropic and more.

    • incident response
    • api keys
    • google cloud
    • aws
    • openai
    • anthropic