How to find exposed API keys on your website (a 7-step check)

Disclosure: we build SniffPup, a free passive scanner for live sites. This guide was first published on our site, and every step works without it. Short answer: anything your site sends to the browser