Category - API Security Blog

The size of the threat to cloud security shows theres benefit in exploring whether restricting access can fully secure APIs, for example, with a defense-in-depth model that minimizes an organization’s attack surface.

In addition to traditional API protection strategies such as rate limiting and throttling, Neosec combines behavioral analytics with XDR techniques to identify bad actors within APIs https://t.co/015z ...

September 14, 2021

This post is about how to use the Burp Suite extension “Repeater” in order to automate requests and responses with a web application.

This blogpost will be useful for people who want to learn more about the Repeater plugin of Burp Suite, which allows you to automatically send multiple requests and analyze their responses. This can b ...

September 14, 2021

Neosec, a startup founded by a former Palo Alto Networks executive, launched today with $20.

7 million in funding and paying customers using its application security platform. Neosec CEO Giora Engel previously founded LightCyber, which Palo Alto Networks bought for $105 million in early 2017 ...

September 14, 2021

Neosec is a behavioral analytics platform that aims to give security teams visibility into behavior across their APIs by using existing logs as a data source.

This allows them to discover all the APIs involved in an incident and monitor for future threats. tl;dr: Neosec is a behavioral analytics platform that aims to give security teams visibility into beh ...

September 14, 2021

If you’re looking for a course that will teach you how to hack APIs, this is it.

The XSS Rat's "API Security Testing Guide" provides an excellent introduction into API security testing and the OWASP Top 10 vulnerabilities. The guide covers everything from building your own API to ...

September 14, 2021

I have a lot of thoughts on this book, but Im not sure how many of them are actually relevant to the book itself.

I read The Handmaids Tale in high school and absolutely loved it. It was one of those books that really made me think about what we take for granted as normal and why we should be grateful for o ...

September 14, 2021

SaltStack is a remote execution and configuration management tool that allows you to manage your infrastructure from the command line.

It can be used for server provisioning, cloud orchestration, configuring servers, deploying applications, managing databases and much more. SaltStack has been designed to allow you to easily scale up ...

September 14, 2021

If you pick a random GraphQL framework and run it with default settings in production, disaster is waiting to happen.

2. The double (quintuple) declaration problem# The next big issue I see are the multiple ways of declaring fields in your schema. If we take a look at the official GraphQL Schema Definition Language ...

September 14, 2021