Static code analysis is insufficient in identifying the types of API logic flaws that lead to major API breach.

How to protect your APIs?

There are a number of ways you can protect your APIs from attacks:

 1. Automated Security Testing:  Automated security testing tools such as Brakeman and Code Climate can be used for automated static code scanning, which helps identify common vulnerabilities like SQL injection, cross-site scripting (XSS), and path traversal issues. However, these tools cannot detect more complex attack patterns or logic flaws unique to an application’s specific use case
https://t.co/xUl8dW8KFh