Comment by ecosystem

What do you mean by "private functions"? Do you mean unlisted, but publicly accessible HTTP endpoints?

Are they in your sitemap? robots.txt? Listed in JS or something else someone scraped?