Uncategorized - API Security Blog

I am a security researcher and entrepreneur with over 20 years of experience in the field.

I founded Neosec to solve one of the biggest challenges facing enterprises today: securing APIs. Neosec was started by Ziv Sivan and I [in February 2020]. We previously founded LightCyber, which was ...

September 14, 2021

The best way to get started with the Internet of Things is to start.

If you want a simple, cheap and easy-to-use platform for your first IoT project, use Arduino. If you have more time and money on hand or if you need better performance or power consumption than what a ...

September 14, 2021

The size of the threat to cloud security shows theres benefit in exploring whether restricting access can fully secure APIs, for example, with a defense-in-depth model that minimizes an organization’s attack surface.

In addition to traditional API protection strategies such as rate limiting and throttling, Neosec combines behavioral analytics with XDR techniques to identify bad actors within APIs https://t.co/015z ...

September 14, 2021

This post is about how to use the Burp Suite extension “Repeater” in order to automate requests and responses with a web application.

This blogpost will be useful for people who want to learn more about the Repeater plugin of Burp Suite, which allows you to automatically send multiple requests and analyze their responses. This can b ...

September 14, 2021

Neosec, a startup founded by a former Palo Alto Networks executive, launched today with $20.

7 million in funding and paying customers using its application security platform. Neosec CEO Giora Engel previously founded LightCyber, which Palo Alto Networks bought for $105 million in early 2017 ...

September 14, 2021

Neosec is a behavioral analytics platform that aims to give security teams visibility into behavior across their APIs by using existing logs as a data source.

This allows them to discover all the APIs involved in an incident and monitor for future threats. tl;dr: Neosec is a behavioral analytics platform that aims to give security teams visibility into beh ...

September 14, 2021

If you’re looking for a course that will teach you how to hack APIs, this is it.

The XSS Rat's "API Security Testing Guide" provides an excellent introduction into API security testing and the OWASP Top 10 vulnerabilities. The guide covers everything from building your own API to ...

September 14, 2021

I have a lot of thoughts on this book, but Im not sure how many of them are actually relevant to the book itself.

I read The Handmaids Tale in high school and absolutely loved it. It was one of those books that really made me think about what we take for granted as normal and why we should be grateful for o ...

September 14, 2021