Security · Guide
Forgotten API Keys: How to Revoke Them Without Taking Down a Service
OpenRouter reported more than a thousand active keys across 85 employees—a company self-audit, not an industry-wide measurement. Here’s how to check ownership and dependencies, rotate keys, and understand the limits of key-management tools.