Category - API Security Blog

I was wrong.

Im not going to say that I didnt have my suspicions about the game, but I wasnt expecting it to be this bad. The story is a complete mess of plot holes and contradictions, with characters who ar ...

October 15, 2021

We’re excited to announce that we’ve joined the Health-ISAC Community Services program, and will offer a no-cost API security risk assessment for Health-ISAC members

We're excited to announce that we've joined the Health-ISAC Community Services program, and will offer a no-cost API security risk assessment for Health-ISAC members https://t.co/lxdgpfkxO9 ...

October 15, 2021

Use OAuth2 for SSO with OpenID Connect.

If youre building a web app, chances are you already have an authentication system in place. If its not using OAuth2, then it should be! There are many flavors of OAuth2we recommend using the au ...

October 15, 2021

If youre building a web API, use OAuth2 for SSO with OpenID Connect.

If your app is going to let people log in and create accounts, then you should be using an authentication protocol like OAuth2 or OpenID Connect to do it. These protocols are designed specifically for ...

October 14, 2021

SOAtest now features the ability to closely integrate dynamic application security testing (DAST) for APIs into your functional test suites, and DAST also integrates seamlessly with Parasoft CTP and Parasoft Virtualize.

Enhanced Reporting Across All Three Applications Parasoft SOAtest, Virtualize, and CTP all feature enhanced reporting capabilities that provide more context about how tests are executed in order to h ...

October 14, 2021

Im a big fan of the new features in C# 6.

0, but I dont think they should be used to write production code yet. I have been using Visual Studio 2015 for a while now and it has some really nice improvements over previous versions (especiall ...

October 14, 2021

The number of APIs in use is exploding, but most organizations dont know how many they have or what permissions they hold.

the fact that the API itself often doesnt even know it is being used by an application or program. It just sits there waiting for a command to perform its function and then returns the results back ...

October 14, 2021

Salt Security is the only solution that provides visibility into all of your APIs, including those in use by third-party developers.

Weve built a platform to help you secure and manage your API portfolio. Our customers are securing their APIs with Salt because they understand how important it is to protect them from threats like ...

October 14, 2021