Category - API Security Blog

The EO is a good start, but its not enough.

What Does the Biden Administrations Cybersecurity Executive Order Mean for API Security https://t.co/8AA81xk6rB ...

August 20, 2021

The API security problem is getting worse.

Security concerns are the top inhibitor to innovation. WAFs and API gateways miss most attacks https://t.co/6cZ5lo0cj7 ...

August 20, 2021

Yes, absolutely.

Many organizations dont have security practitioners as part of their developer cycle, and developers are not being trained on how to secure APIs. In the past few years, we have seen many high-profi ...

August 20, 2021

API security is a business problem, not an IT problem.

Read the full report here: https://ow https://t.co/6cZ5lo0cj7 ...

August 20, 2021

I have a unique skill set that centers around logic flaws and IDORs which i have not seen very much by other hunters.

This gives me the advantage of finding less duplicates and maximising my chance of finding a vulnerability by picking the correct target and applying the correct test strategy. This course is for you ...

August 20, 2021

The course is for you if you want to learn how to use Adobe Photoshop CC.

How the course works: I will be explaining everything in a very detailed and easy way so everyone can understand it! I will also give examples of what i am talking about so you can see exactly what i ...

August 20, 2021

Assumptions and tolerances are the cracks in your API security.

They're not malicious, they're just there. You can't prevent them from happening, but you can be aware of their existence and take steps to mitigate their impact on your organization's security postur ...

August 20, 2021

I’m a software engineer in the San Francisco Bay Area.

I work at Stripe on the API team, where we build APIs for developers to use with their apps. I've been working as an engineer since 2011, and have worked in both startups and big companies. I got my ...

August 20, 2021