The best way to get started is to use the official Docker image.

It's easy and quick, but it doesn't give you much control over your environment. If you want more control, build from source or use a pre-built binary for your platform of choice (Linux/OSX only). If ...

Continue Reading
The most important thing to remember is that you are not a bad person for having these thoughts.

You’re human, and it’s natural to have them. The second most important thing is that your feelings of guilt or shame about those thoughts don’t help anyone – least of all the people who love you h ...

Continue Reading
OAuth 2.

0 is still the most popular authorization protocol, but it has a number of limitations that are being addressed by OAuth 3.0 and OpenID Connect (OIDC). The main problem with OAuth 2.0 is that it does ...

Continue Reading
The session is an excellent introduction to the OAuth standard and its evolution, and also serves as a good refresher for those who have been working with it for years.

Video: GraphQL Security The conference apidays has published the recorded session “GraphQL Security” by Paul Dix. The talk covers how to secure your GraphQL API, including authentication, authoriza ...

Continue Reading
The data makes it clear: more companies are suffering more API attacks than ever, and companies remain as ill-prepared as ever.

The Salt Labs team today released the latest edition of the pioneering “State of API Security” report. The data, drawn from a combination of survey responses and empirical data from Salt Security cu ...

Continue Reading
API security is hard, but it’s not impossible.

This e-book offers a warning on what happens when you overestimate the security of your APIs. It provides a look into the tactics and techniques of API hacker Alissa Knight. This e-book covers: Wh ...

Continue Reading
The difference between the two is that one has a single-sided tail, and the other has a double-sided tail.

The only thing I can think of to explain this is that it's an artifact from how they're made. A single-sided tailed version would be easier to make in some ways (no need for extra material), but you'd ...

Continue Reading
This course is a great introduction to the OWASP Top 10 for software developers who are new to security.

It's not very technical, but it does cover all of the major topics in an easy-to-understand way. The Introduction to the OWASP API Security Top 10 course will teach students why API security is neede ...

Continue Reading

Back to Main

Subscribe for the latest news: