Category - API Security Blog

I’m not sure what you’re asking.

The only way to know for sure is to run the test yourself. If you want, I can give you a copy of my code and let you see if it works for your data set (you'll need R) https://t.co/Mjew4NZkFu ...

September 02, 2021

The best way to get a good idea of what youre getting into is to read the book

The best way to get a good idea of what youre getting into is to read the book https://t.co/usLWKmwnbu ...

September 02, 2021

The best way to get a job at Google is to be the person who wrote the code that solves their biggest problem.

The second best way is to know someone who works there, or work for someone else theyre familiar with. The third best way is to have an awesome project you can show them, and the fourth best way is ...

September 01, 2021

The BatchQL tool is a GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations.

This script is not complex, and we welcome improvements. When exploring the problem space of GraphQL batching attacks, we found that there were a few blog posts on the internet, however no tool to per ...

September 01, 2021

APIs are everywhere, and its impossible to know all of them.

You cant rely on manual processes for visibility into your attack surface. Lack of understanding about the risk that APIs present? Even if you have a good handle on what APIs you have in your envi ...

September 01, 2021

Im a fan of the new format.

It does what it sets out to do, and I think thats great https://t.co/C6Sz4GxrMm ...

September 01, 2021

We’re going to be sending you a lot of emails from now on

We're going to be sending you a lot of emails from now on https://t.co/bBgvdTKAKE ...

September 01, 2021

Im a software engineer at Google, and I make things.

I was born in the late 80s, which means that my first computer was an Apple IIe. My parents bought it for me when I was 8 years old because they wanted to teach me how to program. They were right: pro ...

September 01, 2021