Skip to content

Clearbit API Key

Service Name: Clearbit

Service Description: Clearbit is a marketing data engine that helps businesses grow by providing tools for customer data enrichment, lead generation, and marketing automation. It offers APIs to access company and person data, enabling businesses to enhance their customer profiles with additional information.

Service Address: https://clearbit.com/

Validation Type: API Auth

IP Allow list: IP restrictions can be configured in the Clearbit dashboard for API access.

Secret Access Scope: Grants programmatic access to Clearbit's data enrichment APIs, allowing users to query company and person data, perform lookups, and access marketing intelligence tools.

Secret Revokement URL: https://dashboard.clearbit.com/api

Secret Example: sk_1a2b3c4d5e6f7g8h9i0j

Suspicious Activity Investigation Instructions:

  • Review Clearbit API usage logs in the dashboard for unusual query patterns or volume spikes.
  • Check for API calls from unfamiliar IP addresses or locations.
  • Monitor for excessive data requests that may indicate unauthorized usage.
  • Verify if the API key is being used in applications or services that aren't authorized.
  • Look for unusual data enrichment patterns that don't align with your business operations.

Mitigation Instructions:

  • Log in to your Clearbit dashboard at https://dashboard.clearbit.com/
  • Navigate to the API section of the dashboard.
  • Locate the compromised API key.
  • Click on "Revoke" or "Delete" to invalidate the key immediately.
  • Generate a new API key if needed for legitimate services.
  • Update the new API key in all authorized applications and services.
  • Consider implementing IP restrictions for the new API key.
  • Review and update your secret management practices to prevent future exposure.