Category - API Security Blog

Im a big fan of the concept, but I think it needs some work.

I have been playing around with this deck for about two weeks now and I have to say that I am very impressed by the power level of this deck. It is capable of winning games out of nowhere because you ...

September 13, 2021

I think the best way to understand this is that we’re seeing a lot of people who are really excited about Rust, and want to use it for things they haven’t seen it used for before.

I've been thinking a lot lately about why I like Rust so much, and what makes me feel confident in saying that it's going to be big. There are lots of reasons: its performance characteristics; its saf ...

September 13, 2021

Gartner just created the category of API security, and were thrilled.

*Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other desi ...

September 13, 2021

the only way to get a good answer is to ask a specific question.

What is the best way for me to learn about how my computer works? The best way for you to learn about how your computer works is by reading books and articles, and asking questions on Stack Overflow. ...

September 13, 2021

GraphQL is a powerful query language for APIs.

It allows clients to request exactly what they need, and nothing more. This makes it easier to evolve your API over time, as well as improve performance by reducing the amount of data transferred betw ...

September 13, 2021

API vulnerabilities can be introduced at any point in the development process.

APIs connect multiple solutions together, which is where a lot of the risk stems from. Developers and tech teams are working on very tight deadlines, with unfamiliar products that were not designed ...

September 13, 2021

Im a software engineer at Google, and I wrote a book about how to build web applications with Go.

I started writing this book in 2015, when I was working as an engineering manager on the AdWords team. The idea for the book came up during one of our weekly meetings where we talked about what new en ...

September 13, 2021

API security is hard and its not getting any easier.

How do we make API security better? Here are some suggestions: 1) Understand the OWASP Top 10 for APIs The Open Web Application Security Project (OWASP) has a list of top 10 risks that shou ...

September 13, 2021