Reported Key Exposure Metrics

Aggregate metrics about exposed API keys reported by KeyDrop, grouped without publishing individual hosts, keys, or precise exposure locations.

KeyDrop publishes aggregate metrics about exposed API keys that have been reported to providers. The public view is intentionally limited to summary counts and broad distributions. It does not publish API keys, hostnames, IP addresses, URLs, hash identifiers, or precise exposure locations.

Reported exposures 16,540 Deduplicated reports sent to providers
Providers 3 API key providers identified
Countries 96 Broad exposure geographies observed
Latest report 2026-06-28T14:04:35Z Timestamp in UTC when available

Provider Breakdown

Tracked providers are listed separately from report volume.

Provider Reports Share
Google 4,594 27.78%
OpenAI 568 3.43%
Stripe 11,378 68.79%

Key Type Mapping

Key formats are mapped to providers separately from provider counts.

Provider Key type
Google Google
Google Google_api_key
Google Google_api_key_service_account
OpenAI OpenAI
OpenAI OpenAI_service_key
OpenAI OpenAI_user_api
Stripe Stripe

Country Breakdown

Geography is published at country level only.

Country Code Reports
Finland FI 7,283
Germany DE 3,000
United States US 2,491
The Netherlands NL 537
India IN 430
United Kingdom GB 391
France FR 300
Singapore SG 241
South Korea KR 148
Japan JP 125
Australia AU 120
Canada CA 116
China CN 99
Bulgaria BG 80
United Arab Emirates AE 79
Lithuania LT 75
Brazil BR 73
Russia RU 69
Hong Kong HK 57
Sweden SE 57
Ireland IE 55
Indonesia ID 51
Poland PL 45
Spain ES 43
Vietnam VN 39
Belgium BE 37
Türkiye TR 37
South Africa ZA 34
Italy IT 33
Thailand TH 32
Romania RO 30
Mexico MX 28
Ukraine UA 28
Chile CL 27
Taiwan TW 24
Norway NO 13
Bahrain BH 12
Saudi Arabia SA 12
UNK UNK 12
Israel IL 11
Switzerland CH 11
Hungary HU 10
Malaysia MY 10
Pakistan PK 10
Czechia CZ 9
Iran IR 9
Argentina AR 8
Kazakhstan KZ 8
Denmark DK 7
Austria AT 6
Bangladesh BD 6
Portugal PT 6
Peru PE 4
Bolivia BO 3
Cyprus CY 3
Libya LY 3
Slovakia SK 3
Belarus BY 2
Colombia CO 2
Ethiopia ET 2
Kenya KE 2
Luxembourg LU 2
New Zealand NZ 2
Oman OM 2
Philippines PH 2
Qatar QA 2
Seychelles SC 2
Armenia AM 1
Azerbaijan AZ 1
British Virgin Islands VG 1
Croatia HR 1
Dominican Republic DO 1
Ecuador EC 1
Egypt EG 1
Estonia EE 1
Gibraltar GI 1
Iceland IS 1
Kuwait KW 1
Latvia LV 1
Malawi MW 1
Moldova MD 1
Montenegro ME 1
Morocco MA 1
Myanmar MM 1
Nepal NP 1
Niger NE 1
Nigeria NG 1
North Macedonia MK 1
Palestine PS 1
Paraguay PY 1
Serbia RS 1
Tanzania TZ 1
Togo TG 1
Turkmenistan TM 1
Uganda UG 1
Yemen YE 1

Publication Method

KeyDrop stores deduplicated, anonymized report records internally. Public metrics are generated from aggregate counts only, so individual report hashes, keys, network locations, hosts, and URLs are excluded from the site output.

Last generated:

Coverage window: through .