# Truffle Security launches program to revoke exposed API keys

_Published Thursday, November 5, 2026 at 4:10 PM EST · Security · Latest · Tier 2 — Notable_

![Truffle Security launches program to revoke exposed API keys — Primary](https://www.bleepstatic.com/content/hl-images/2026/11/05/keus.jpg)

Truffle Security has launched a free Secrets Revocation Program to help API key issuers invalidate 1.4 million publicly exposed secrets that remain valid, BleepingComputer reported. Sixteen issuers have joined, including Hugging Face, Notion, Vercel, Resend, RubyGems and Twilio.

The program uses TruffleHog to verify leaked keys, then coordinates revocation through an issuer's endpoint or delivers verified keys through a webhook for revocation within 14 days. That allows issuers to act when key owners fail to respond. Truffle says 81% of the keys it reported last year still worked six months later.

## Sources

- [BleepingComputer](https://www.bleepingcomputer.com/news/security/truffle-security-launches-program-to-revoke-14-million-live-secrets/)

---
Canonical: https://techandbusiness.org/newswire/ae8EKdaSxVFYzgQG6sKkmg
Published: 2026-11-05T21:10:20.888Z
Story chronology: 2026-11-05T20:15:08.000Z
Retrieved: 2026-11-06T22:56:45.127Z
Publisher: Tech & Business (techandbusiness.org)