Blog
How-tos, research, and lessons on securing APIs, AI, and the modern application surface.
October 28, 2026
Former Charles Schwab CISO Bashar Abouseido explains why AI-driven attacks demand hyper defense, and why exploitability, not patch speed, sets priorities.
6 min
February 19, 2025
As cars go cloud-native, their APIs become targets — automated security testing helps ensure safety on the roads.
March 13, 2024
Strong API testing prevents critical vulnerabilities before launch. When overlooked, API risks can derail releases and create severe security impact.
March 4, 2024
Internal APIs aren’t immune — automated testing uncovers hidden vulnerabilities that traditional tools often skip.
January 8, 2024
APIsec’s AI-powered red team finds real API vulnerabilities—no false positives and no manual effort. Pen test your API in minutes.
January 3, 2024
Learn about DSS 4.0's new API security requirements for PCI compliance. March 2024 deadline approaches - prepare your API program now.
December 15, 2023
A deep dive into the Edulog Parent Portal API breach, what caused the BOLA exposure, and how teams can prevent similar API attacks.
December 12, 2023
The 2023 OWASP API Security Top 10 explained: all ten risks, what changed from 2019, and how to prevent BOLA, broken authentication and more.
March 21, 2023
In this article, you will learn how to balance data privacy (HIPAA) with data access (EHR interoperability)
November 15, 2022
In this article, you will learn how to choose an API security tech stack based on your security goals and needs.
This article discusses five alternatives to Burp Suite that you should consider.
November 14, 2022
Compare Burp Suite and OWASP ZAP for API security testing. In-depth analysis of features, pricing, automation, and OWASP Top 10 coverage — updated for 2026.
November 7, 2022
This article covers the top objectives from OCC's 2023 Bank Supervision Operating Plan and how you can get a jump start protecting your FinTech APIs.
.png)
.png)
.png)
.png)
.png)
.png)
.jpg)
