Exposed API keys demand minutes-fast containment. Learn triage order: revoke, audit, rotate and review without panic mistakes.