Security insights from the edge
Latest
Leaked Gemini API Key? Cap the Damage Per Key, Not Per Project
Why Gemini keys leak from Vite and AI Studio apps, the first hour after a leak, and per-token limits that keep one key from draining your account.
Read articleHow to Protect Your OpenAI API Key From Leaks
A stolen OpenAI key can run up a large bill fast. Every protection layer - from .gitignore to host-bound edge proxies.
Read articleAPI Key Leaks on GitHub: What the Data Shows
Nearly 24 million new secrets on public GitHub in 2024, leaks that stay valid for years, and the AI-assistant effect. What the numbers mean for your security posture.
Read articleWhy Cloudflare Workers Is the Right Runtime for API Key Security
V8 isolates, no file system, and requests handled near the caller. The architectural case for running API key proxies at the edge.
Read articleWhy Secret Managers Don't Solve the API Key Problem
HashiCorp Vault, AWS Secrets Manager, and Doppler are excellent tools - but they don't proxy your requests. Here's the gap they leave.
Read articleThe Minutes-Long Window: How Attackers Exploit Leaked Keys
What happens after an API key is pushed to a public GitHub repo, and why detect-and-rotate is too slow on its own.
Read articleHow to Audit Your Codebase for Exposed API Keys (Free Tools)
A practical guide to scanning your repositories, CI pipelines, and Docker images for accidentally committed secrets.
Read articleHost-Binding Encryption: The Architecture Behind KeyVault Edge
A technical deep-dive into how KeyVault Edge tokens are encrypted, signed and bound to the origins you allow.
Read articleAI Code Assistants and Leaked Secrets: What the Data Says
GitGuardian found Copilot-enabled repositories leak secrets more often than average. Why, and what mitigates it.
Read articleChangelog
Apr 2026
Public launch. Sanitized tokens, proxy routing, breach detection, dashboard, Stripe billing.