ZAGOS

Signed out

Read-only local preview. Status changes are kept in memory for this session only — no cloud write occurs.

Unrestricted API key detected (frontend-exposed)

Source: cloud api guard

critical

Open

Actions

Preview-only lifecycle transitions. Each action appends to the audit trail below.

Details

A Google Maps API key with no application or API restrictions was found embedded in a public frontend bundle.

Affected frameworks / controls

zagos-cloud-api-guard

iso-27001

CAG-1

CAG-2

Evidence summary

Sample scan flagged 1 unrestricted key reachable from a client bundle.

Recommendation

Restrict the key to specific APIs and HTTP referrers, then rotate it.

Recommended remediation workflow

Restrict API key

Apply API and application restrictions to an over-permissive API key. · SLA 24h

Metadata

OwnerSam Okafor

Due dateMay 30, 2026

DetectedMay 27, 2026

Resolved-

Linked evidence

Evidence sharing a control with this finding.

No linked evidence.

Audit trail