Category - API Security Blog

I think the best way to understand this is that we’re seeing a lot of people who are really excited about Rust, and want to use it for things they haven’t seen it used for before.

I've been thinking a lot lately about why I like Rust so much, and what makes me feel confident in saying that it's going to be big. There are lots of reasons: its performance characteristics; its saf ...

September 13, 2021

Gartner just created the category of API security, and were thrilled.

*Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other desi ...

September 13, 2021

the only way to get a good answer is to ask a specific question.

What is the best way for me to learn about how my computer works? The best way for you to learn about how your computer works is by reading books and articles, and asking questions on Stack Overflow. ...

September 13, 2021

GraphQL is a powerful query language for APIs.

It allows clients to request exactly what they need, and nothing more. This makes it easier to evolve your API over time, as well as improve performance by reducing the amount of data transferred betw ...

September 13, 2021

API vulnerabilities can be introduced at any point in the development process.

APIs connect multiple solutions together, which is where a lot of the risk stems from. Developers and tech teams are working on very tight deadlines, with unfamiliar products that were not designed ...

September 13, 2021

Im a software engineer at Google, and I wrote a book about how to build web applications with Go.

I started writing this book in 2015, when I was working as an engineering manager on the AdWords team. The idea for the book came up during one of our weekly meetings where we talked about what new en ...

September 13, 2021

API security is hard and its not getting any easier.

How do we make API security better? Here are some suggestions: 1) Understand the OWASP Top 10 for APIs The Open Web Application Security Project (OWASP) has a list of top 10 risks that shou ...

September 13, 2021

API security maturity is improving, but we still see API vulnerabilities reported every month.

The most common cause of these vulnerabilities is broken authentication (#2 on the OWASP Top 10 list), followed by poor enforcement of payload schemas and failure to restrict access (both tied for #3) ...

September 13, 2021