Blog

Field notes on application security.

How-tos, research, and lessons on securing APIs, AI, and the modern application surface.

Bashar Abouseido, former Charles Schwab CISO, with the headline Hyper offense needs hyper defense.

October 28, 2026

Hyper Defense: Why Patching Faster Won't Stop AI-Speed Attacks

Former Charles Schwab CISO Bashar Abouseido explains why AI-driven attacks demand hyper defense, and why exploitability, not patch speed, sets priorities.

6 min

April 12, 2022

How to Address Business Logic Flaws During Application Design

In this article, you will learn how to address business logic flaws during application design to protect yourself from cyber threats.

January 29, 2026

Business Logic vs Application Logic in APIs

Business logic refers to the rules and procedures that govern a business, including things like pricing, discounts, inventory levels, customer eligibility, etc. Application logic, on the other hand, is the code that implements those business rules within a specific application.

January 27, 2026

5 Real Business Logic Failures That Led to Major Breaches

Improper Inventory Management (OWASP 9) exposes hidden API risks. See how the Experian breach unfolded and how APIsec automates discovery and protection.

February 3, 2024

Why Business Logic Vulnerabilities Are Your #1 API Security Risk

In this guide, you will learn why business logic vulnerabilities are so dangerous for API security and how to protect against them.

Improper API asset management – risks of poor endpoint inventory

March 28, 2022

Improper Asset Management: Hidden API Risks Explained

Documenting your APIs may be one of the most tedious tasks for a dev team, but it’s also one of the biggest threats to API security.

APIsec feature infographic – overview for API security platform

March 25, 2022

What Is a Business Logic Layer?

In this explainer, you'll discover why business logic vulnerabilities are so concerning when it comes to API security.

March 21, 2022

Fintech API Security Checklist: Avoid Disaster

Get a no-nonsense API security checklist tailored for fintech — backed by automation that finds weak spots fast.

Banking API security – protecting financial data via secure API practices

March 17, 2022

Banking APIs: Closing the Door on Fraud

Discover the API attack vectors banks face — and how automated security testing strengthens defenses across financial systems.

January 29, 2026

Cybersecurity in Fintech: Risks, API Vulnerabilities & Best Practices

Discover the top cybersecurity threats facing fintech companies in 2026 — API attacks, data breaches, account takeovers, and how to stop them.

What is vulnerability scanning – process overview for security testing

March 12, 2022

Vulnerability Scanning for APIs: What You’re Missing

Learn what vulnerability scanning really means for APIs — and why automated testing goes deeper than surface scans.

March 9, 2022

5 Best Web Application and API Vulnerability Scanners in 2022

In this article, we cover the best vulnerability scanners to help you protect yourself from data breaches and other cyber threats.

March 5, 2022

Top 5 Best API Documentation Tools to Help Improve Adoption Rates

In this article, we review the best API documentation tools to help you boost your adoption rates.