Category - API Security Blog

The tools we use today to protect Web applications and APIs are often ineffective, inefficient, and even counterproductive.

The good news is that there's a better way forward. We can build modern security tools for the decentralized enterprise but it will take time and effort to get there. The first step is understandin ...

10 сентября, 2021

We’re hosting a webinar on September 21st to discuss the top five API security myths and how you can break through them

We're hosting a webinar on September 21st to discuss the top five API security myths and how you can break through them https://t.co/0wfGbnnJnf ...

10 сентября, 2021

Never use non-null value auth tokens.

#3: APIs Exposing Sensitive Data in Cleartext This is not a new problem, but it has been brought to the forefront of many organizations minds after recent high profile incidents. The exposure of se ...

10 сентября, 2021

Gartner just Created the Category Gartner has created a new category, API Security.

It is now its own thing not a subset of WAF or gateway capabilities. The report states: API security can be implemented as an independent layer that sits between the application and the firewall ...

10 сентября, 2021

The OWASP API Risk List is a great starting point for assessing the security of an API.

However, it could be improved by adding more granular controls and expanding its scope to include other attack vectors such as mobile apps. The Open Web Application Security Project (OWASP) has been ...

10 сентября, 2021

The report, Transitioning to Web App and API Security by Enterprise Strategy Group (ESG), shows that organizations are investing more than ever in web app and API security tools.

However, most of these tools fall short of todays needs. The average organization spends $200K on such tools but sees little return on investment (ROI). Half the alerts generated by these tools are ...

10 сентября, 2021

I’m a front-end developer who loves to code and build things.

I've been doing this for about 4 years now, and have worked on projects ranging from small personal sites to large e-commerce platforms. I love learning new technologies and techniques, so if you're ...

10 сентября, 2021

The new rules are a big improvement over the old ones, but they still have some problems.

The Old Rules: The No-Fly List and the Selectee List In 2002, Congress passed the Homeland Security Act (HSA), which created a list of people who were not allowed to fly on commercial aircraf ...

09 сентября, 2021