See what’s exploitable

Blog

Field notes on application security.

How-tos, research, and lessons on securing APIs, AI, and the modern application surface.

Bashar Abouseido, former Charles Schwab CISO, with the headline Hyper offense needs hyper defense.

October 28, 2026

Hyper Defense: Why Patching Faster Won't Stop AI-Speed Attacks

Former Charles Schwab CISO Bashar Abouseido explains why AI-driven attacks demand hyper defense, and why exploitability, not patch speed, sets priorities.

6 min

APIsec infographic – API security best practices visual aid

January 24, 2022

API Security 101: The What, The How, and The Why

APIs have revolutionized the way web applications are used, by building communication pipelines between multiple services. It is ever more critical to ensure the security of APIs.

January 21, 2022

API Security: How to Add the Sec in DevSecOps

APIsec University offers free, on-demand API security training covering OWASP risks, hands-on labs, and certifications trusted by 120,000+ professionals.

January 18, 2022

Why Automated Penetration Testing Is a Must

With data breaches and cyber-attacks occurring more frequently, the need for regular, intelligent, and thorough penetration testing is at an all-time high.

Allstate Apigee webinar – API security education event graphic

January 15, 2022

How to Secure an API: Best Practices

API experts from Google Cloud, Allstate, APIsec, and Achieve Internet sat down to discuss how to integrate API security testing into the CI/CD pipeline.

January 12, 2022

Introducing the First Fully Automated Certified API Pen-Test

APIsec combines AI-driven attack simulations with expert validation and continuous testing to deliver real, year-round API security.

REST API graphic – visual depicting application programming interface elements

January 6, 2022

What Is a REST API & Why It Matters for Security (2026 Guide)

REST APIs power 83% of web services – but most are insecure. Learn what REST APIs are, how they work, and how to secure them with a free scan.

January 3, 2022

Secure Token Generation: Best Practices for APIs

Implement robust token generation logic — and test it automatically to prevent auth failures and security gaps.

APIsec highlights infographic – overview of security features

December 28, 2021

Guide to Automated API Security Testing

Secure every API with AI-powered, automated API security testing that discovers all endpoints and stops OWASP API and BOLA risks before production.

Generic tech or business avatar – default profile image illustration

December 11, 2021

How to Use Apisec APIs: Simple Guide

Learn how to call Apisec’s APIs step-by-step — enabling automated security testing directly in your CI/CD pipeline.

December 6, 2021

What First American’s $885M Leak Teaches API Teams

Explore the First American API breach — and how automated testing could have uncovered the data exposure early.

December 1, 2021

How hackers acquired patient’s personal data from Healthline

This hacked required no special tools or exploits or account hijacking of any sorts etc. Simply a web browser would do the job or an API call.

January 29, 2026

How Hackers Acquired 350K Citi Customer Records

Hackers were able to acquire over 350K customer’s personal data from Citi’s web application. Citi managed over 21M customers when the breach happened.