Truffle Security has launched the Secrets Revocation Program, a free initiative that helps API key issuers revoke 1.4 million publicly exposed secrets that remain valid.

Since 2022, the company has discovered secrets embedded in public repositories, packages, container images, datasets, and applications.

Earlier this year, Truffle Security reported that it had found 543,000 valid credentials leaked in public GitHub repositories.