Blog

Field notes on application security.

How-tos, research, and lessons on securing APIs, AI, and the modern application surface.

Bashar Abouseido, former Charles Schwab CISO, with the headline Hyper offense needs hyper defense.

October 28, 2026

Hyper Defense: Why Patching Faster Won't Stop AI-Speed Attacks

Former Charles Schwab CISO Bashar Abouseido explains why AI-driven attacks demand hyper defense, and why exploitability, not patch speed, sets priorities.

6 min

How Automated API Endpoint Testing Improves Security Coverage | APIsec

November 14, 2025

How Does Automated API Endpoint Testing Improve Security Coverage

A deep dive into API privacy: why it matters, the frameworks shaping it, and how teams can strengthen privacy across modern API ecosystems.

API fuzzing for security testing – automated method for discovering flaws

October 22, 2025

API Fuzzing for Security Testing: Complete Guide

API fuzzing automates vulnerability discovery beyond what manual testing can find. Learn security testing workflows, top tools, and CI/CD integration strategies.

API authentication and authorization process – securing data access

October 21, 2025

API Auth Best Practices: Strong Authentication & Authorization

APIsec uncovers vulnerabilities before production and integrates seamlessly into CI/CD for streamlined, secure development workflows.

Broken authentication in APIs – vulnerability example and risk illustration

October 21, 2025

Fixing Broken API Authentication: Detection & Prevention

Fix broken API authentication vulnerabilities before attackers exploit them. Learn detection methods, prevention strategies, and automated testing solutions for secure APIs.

October 21, 2025

API Endpoint Guide: Architecture, Security & Best Practices

A guide to choosing API pen testing tools: key benefits, challenges, must-have features, and how strong tooling prevents API vulnerabilities.

October 21, 2025

Difference Between SAST and DAST: Key Insights & Tools

Understand the difference between SAST and DAST, their importance, and the best tools for application security testing.

API failure causes and solutions – how to fix API errors and issues

October 21, 2025

Troubleshooting Guide for API Failure: Common Causes & Solutions

Fix API failures with effective solutions. Understand causes and learn how to troubleshoot common API issues quickly and efficiently.

API security fundamentals – essential practices for robust application APIs

October 21, 2025

API Security Orchestration: Automating Response & Remediation

Automate incident response with API security orchestration to enhance security operations and streamline threat detection and remediation.

API security testing vs code review – automation replacing manual checks illustration

October 17, 2024

Prompt Injection and LLM API Security Risks | Protect Your AI

Address prompt injection and API security risks in AI. Implement effective strategies to safeguard your systems against emerging threats.

Shadow API discovery – finding and securing undocumented API endpoints

October 17, 2025

Secure Your Shadow APIs: Best Practices for API Discovery

Learn effective strategies for shadow API discovery and securing undocumented endpoints to enhance your API security posture.

October 17, 2025

Zero Trust API Security: Upgrade Your Cyber Defense Today

Enhance your cybersecurity with Zero Trust API Security, ensuring robust access control and data protection against evolving threats.

BOLA blog feature – broken object-level authorization vulnerability illustration

April 21, 2025

BOLA Explained: The Threat No One’s Testing

Learn why BOLA is the #1 API risk — and how Apisec’s automation can reveal and block it before damage is done.