Each item in the API Security Checklist is arguably just as critical as the next, but don’t get overwhelmed. This checklist is provided to help you navigate through the top items in area of best practices, and you may opt to emphasize sets of best practices where you already have technology investments or manpower. Here are some suggestions on how to scope the problem and prioritize activities:

Security test your APIs, but know that you will also need runtime protection to catch changes that don’t go through standard build process and abuses that testing tools aren’t designed to find
https://t.co/dzuPgVtOnG