Protect Your Integrations with Automatic Client Secret Revocation

If we detect specific security threats related to an API integration in your account, we automatically revoke the client secret for the installed package. For example, if we detect that a client secret is exposed in a public repository, we revoke it, notify admins by email, and display a notification message in Marketing Cloud Engagement. If a follow-up security review determines that the secret isn’t compromised, we automatically restore it. This feature is enabled by default. Admins can’t turn it off.

Where: This change applies to all Marketing Cloud Engagement editions.