Built small business website with Claude and integrations with Wave + HubSpot (Worried about security issues)

So built a very nice small business website for my service business..... but put my API keys in there and use a lot of HTML code to build out my pages. How can I better protect my small business because I want to go global and franchise it later on and don't