APISEC|CON is BACK! May 21 @ 12pm ET - Register NowAPIsec website image

OWASP

Learn how to take your API security to the next level
NoSQL Injection in APIs: Detection & Prevention
Jesse Freeman
API Security

NoSQL Injection in APIs: Detection and Prevention

April 21, 2025
6 min
SQL Injection in APIs: Testing & Prevention
Dave Piskai
API Testing

SQL Injection in APIs: Testing, Exploitation, and Prevention

October 28, 2022
6 min
SQL Injection Cheat Sheet for API Security
Jesse Freeman
API Security

SQL Injection Cheat Sheet for API Security Testing

April 21, 2025
6 min
HTTP Request Smuggling in API Gateways
Jesse Freeman
API Security

HTTP Request Smuggling in API Gateways

April 21, 2025
6 min
API Access Control Vulnerabilities: Testing Guide
Jesse Freeman
API Security

API Access Control Vulnerabilities: Complete Testing Guide

April 21, 2025
6 min
Insecure Deserialization in APIs: Complete Guide
Dave Piskai
API Security

Insecure Deserialization in APIs: Complete Guide

October 28, 2022
6 min
Race Condition Vulnerabilities in APIs
Dave Piskai
API Security

Race Condition Vulnerabilities in APIs

October 28, 2022
6 min
Path Traversal in APIs: Detection and Prevention
Jesse Freeman
API Security

Path Traversal in APIs: Detection and Prevention

April 21, 2025
6 min
Top API Discovery Tools | Find & Secure APIs
Christine Bevilacqua
API Security

Top API Discovery Tools

March 21, 2023
6 min
Manual vs Automated Penetration Testing for APIs | What Works in 2026
Christine Bevilacqua
API Security

Manual Penetration Testing vs Automated API Security

March 21, 2023
6 min
Difference Between API Security and Web Security
Dave Piskai
API Security

Difference Between API Security and Web Security

October 28, 2022
6 min
What Is API Discovery and Inventory? Complete Guide
Christine Bevilacqua
API Security

What Is API Discovery and Inventory?

March 21, 2023
6 min
API Sprawl Management Strategies
Jesse Freeman
API Security

API Sprawl Management Strategies

April 21, 2025
6 min
Zombie API Detection and Removal: Eliminate Hidden Risks
Jesse Freeman
API Security

Zombie API Detection and Removal

April 21, 2025
6 min
How to Automate API Discovery with Extensions
Dan Barahona
API Security

How to Automate API Discovery with Extensions

April 10, 2022
6 min
What Is an API Call? How API Requests Work
Dan Barahona
API Testing

What Is an API Call?

April 10, 2022
6 min
Build Your API Inventory Automatically | APIsec
Dan Barahona
API Testing

Build Your API Inventory Automatically as You Browse

April 10, 2022
6 min
OAuth 2.0 Common Security Flaws and Prevention Techniques
Dan Barahona
API Security

OAuth 2.0 Common Security Flaws and Prevention Techniques

April 10, 2022
6 min
API Rate Limiting Strategies: Preventing DDoS and Resource Exhaustion
Dan Barahona
API Security

API Rate Limiting Strategies: Preventing DDoS and Resource Exhaustion

April 10, 2022
6 min
Open Source vs Commercial API Security Scanners Compared
Dan Barahona
API Security

Open Source vs Commercial API Security Scanners Compared

April 10, 2022
6 min
Financial API Security Compliance: PCI DSS & PSD2
Dan Barahona
API Security

Financial Services API Security Compliance Guide

April 10, 2022
6 min
API Security Automation Tools for DevOps
Dan Barahona
API Security

API Security Automation Tools and Techniques for DevOps Teams

April 10, 2022
6 min
How to Automate API Security Testing in CI/CD
Dan Barahona
API Security

How to Implement Automated API Security Testing in Development Workflows

April 10, 2022
6 min
API Security Testing for Payment Gateways: PSD2 & Open Banking Compliance Guide
Dan Barahona
API Security

API Security Testing for Payment Systems: PSD2 and Open Banking Requirements

April 10, 2022
6 min
JWT Security Vulnerabilities: Prevention Guide & Best Practices
Dan Barahona
API Security

JWT Security Vulnerabilities: Prevention Guide & Best Practices

April 10, 2022
6 min
API Abuse Detection: Distinguish Good Bots from Bad Bots
Dan Barahona
API Security

API Abuse Detection: Distinguishing Between Bots

April 10, 2022
6 min
How to Secure Webhook Endpoints: Authentication & Validation Guide
Dan Barahona
API Security

Securing Webhook Endpoints: Authentication and Validation Best Practices

April 10, 2022
6 min
Microservices API Security: Authentication & Authorization Guide
Dan Barahona
API Security

API Security in Microservices Architecture: Best Practices

April 10, 2022
6 min
GraphQL Security Testing Guide: Vulnerabilities & Best Practices
Dan Barahona
API Security

GraphQL Security Testing: Complete Guide for Developers

April 10, 2022
6 min
REST API Security Best Practices: 6 Essential Methods
Dan Barahona
API Security

REST API Security Best Practices Every Developer Should Know

April 10, 2022
6 min
API Penetration Testing Checklist: 10 Critical Tests
Dan Barahona
API Security

Complete API Penetration Testing Checklist for Security Teams

April 10, 2022
6 min
https://www.apisec.ai/blog
Dan Barahona
API Security

SSRF Explained: OWASP API Security Principle 7 Made Simple

April 10, 2022
6 min
Unrestricted access in APIs – OWASP API security principle 6 explained
Dan Barahona
API Security

Unrestricted Business Flows: OWASP Principle 6 Explained

April 10, 2022
6 min
Understanding broken function-level authorization in APIs – vulnerability graphic
Dan Barahona
API Security

Instagram API Breach 2026: 17.5M Accounts & the Unrestricted Access Flaw

April 10, 2022
6 min
BOLA vulnerability lessons – understanding broken object-level API authorization
Dan Barahona
API Security

BFLA Explained: Securing API Functions from Abuse

April 10, 2022
6 min
Understanding BOPLA in APIs – broken object property-level authorization graphic
Dan Barahona
API Security

BOPLA (Broken Object Property Level Authorization): OWASP API3 Explained

April 10, 2022
6 min
API unrestricted resource consumption – performance and security risk
Dan Barahona
API Security

Preventing Resource Abuse: Protect APIs from Harvesting

April 10, 2022
6 min
Dan Barahona
API Security

Inside the Peloton Breach: Broken Authentication Lessons

April 10, 2022
6 min
Security misconfiguration in APIs – vulnerabilities and best practices
Dan Barahona
API Security

Understanding Security Misconfiguration in APIs: OWASP 8 Explained

April 10, 2022
6 min
Improper API inventory management – asset oversight risk illustration
Dan Barahona
API Security

Improper Inventory Management in APIs OWASP API9 Explained & How to Fix It

April 10, 2022
6 min
Dan Barahona
API Security

Unsafe API Consumption: Securing Third-Party Integrations

April 10, 2022
6 min
Dan Barahona
API Security

Broken Authentication Explained: OWASP API Principle 2

April 10, 2022
6 min
Free API scanner comparison – evaluating value of free API security testing tools
Dan Barahona
API Testing

Are Free API Scanners Actually Worth It?

April 10, 2022
6 min
Choosing an API penetration testing tool – important criteria to consider
Dan Barahona
API Testing

How to Choose the Right API Pen-Testing Tool

April 10, 2022
6 min
BOLA vulnerability lessons – understanding broken object-level API authorization
Dan Barahona
API Testing

Real-World Lessons of Broken Object Level Authorization (BOLA)

April 10, 2022
6 min
Dan Barahona
API Security

BOLA Explained: OWASP API Security Principle 1 for Teams

April 10, 2022
6 min
Banking API security – protecting financial data via secure API practices
Dan Barahona
API Security

Real-World API Security Breaches: Lessons from Major Attacks

April 10, 2022
6 min
Application security technology landscape – software security architecture visual
Dan Barahona
API Security

AppSec Tech Landscape: Strengths, Gaps & What Teams Need

April 10, 2022
6 min
Dan Barahona
API Security

The Three Pillars of Modern API Security

April 10, 2022
6 min
Dan Barahona
API Security

API Security Fundamentals: Core Principles for Modern Apps

April 10, 2022
6 min
API failure example – visual depicting a failed application programming interface
Dan Barahona
API Testing

API Failure: 7 Causes and How to Fix Them

April 10, 2022
6 min
Which API Security Testing Tool Should I Choose?
Dan Barahona
API Testing

Which API Security Testing Tool Should I Choose

April 10, 2022
6 min
API Security Testing Automation in CI/CD Pipelines Setup Guide
Dan Barahona
API Testing

CI/CD API Security: A Complete Automation Guide

April 10, 2022
6 min
APIsec blog article cover image
Dan Barahona
API Testing

API Security Mistakes That Lead to Data Breaches

April 10, 2022
6 min
Detecting business logic vulnerabilities in API – security testing graphic
Dan Barahona
API Testing

How to Detect Business Logic Vulnerabilities in API

April 10, 2022
6 min
APIsec blog article cover image
Dan Barahona
API Testing

Why Do APIs Keep Getting Hacked

April 10, 2022
6 min
When to use API penetration testing – decision points for application security testing
Dan Barahona
API Testing

When Do You Need API Penetration Testing for Your Applications

April 10, 2022
6 min
API Vulnerability Scanning vs Penetration Testing: Key Differences
Dan Barahona
API Testing

API Vulnerability Scanning vs Penetration Testing: Key Differences

April 10, 2022
6 min
Why use automated API testing tools – benefits for application security
Dan Barahona
API Testing

Why Automated API Testing Tools Are Better Than Manual Testing

April 10, 2022
6 min
APIsec blog article cover image
Dan Barahona
API Testing

Can Automated API Security Testing Replace Security Code Reviews

April 10, 2022
6 min
How Automated API Endpoint Testing Improves Security Coverage | APIsec
Dan Barahona
API Testing

How Does Automated API Endpoint Testing Improve Security Coverage

April 10, 2022
6 min
API fuzzing for security testing – automated method for discovering flaws
Dan Barahona
API Testing

API Fuzzing for Security Testing: Complete Guide

April 10, 2022
6 min
API authentication and authorization process – securing data access
Dan Barahona
API Security

API Auth Best Practices: Strong Authentication & Authorization

April 10, 2022
6 min
Broken authentication in APIs – vulnerability example and risk illustration
Dan Barahona
API Security

Fixing Broken API Authentication: Detection & Prevention

April 10, 2022
6 min
Dan Barahona
API Security

API Endpoint Guide: Architecture, Security & Best Practices

April 10, 2022
6 min
Dan Barahona
API Testing

Difference Between SAST and DAST: Key Insights & Tools

April 10, 2022
6 min
API failure causes and solutions – how to fix API errors and issues
Dan Barahona
API Testing

Troubleshooting Guide for API Failure: Common Causes & Solutions

April 10, 2022
6 min
API security fundamentals – essential practices for robust application APIs
Dan Barahona
API Security

API Security Orchestration: Automating Response & Remediation

April 10, 2022
6 min
API security testing vs code review – automation replacing manual checks illustration
Dan Barahona
API Security

Prompt Injection and LLM API Security Risks | Protect Your AI

April 10, 2022
6 min
Shadow API discovery – finding and securing undocumented API endpoints
Dan Barahona
API Security

Secure Your Shadow APIs: Best Practices for API Discovery

April 10, 2022
6 min
Dan Barahona
API Security

Zero Trust API Security: Upgrade Your Cyber Defense Today

April 10, 2022
10 min
BOLA blog feature – broken object-level authorization vulnerability illustration
Jesse Freeman
API Security

BOLA Explained: The Threat No One’s Testing

April 21, 2025
5 minutes
Dan Barahona
API Security

Software-Defined Vehicles: Are Your APIs Driving You Into Risk?

April 10, 2022
7 minutes
Tech blog featured image – API security discussion article visual
Shelby Matthews
API Security

APIsec presents the 2024 API Security Market Report

December 12, 2023
5 min.
Blog heading graphic – modern content article feature illustration
Stacey Levine
API Testing

Internal APIs at Risk: Why Testing Matters

March 4, 2024
5 minutes
Tech article heading graphic – modern blog or content feature
Dan Barahona
API Security

2024 API Security Best Practices

April 10, 2022
5 minutes
Shelby Matthews
API Security

Upcoming DSS 4.0 Deadline for PCI Compliance

December 12, 2023
5 minutes
Shelby Matthews
API Security

Edulog API Breach Explained: BOLA Risks & Fixes

December 12, 2023
5 minutes
Shelby Matthews
OWASP

2023 OWASP API Top Ten

December 12, 2023
13 minutes
EHR and HIPAA blog image with medical design
Christine Bevilacqua
API Security

HIPAA vs Cures Act: Navigating Privacy & Interoperability

March 21, 2023
5 mins
Choosing an API security tech stack – guide to selecting software and tools
Dan Barahona
API Security

How to Choose an API Security Tech Stack

April 10, 2022
6 mins
APIsec logo – API security platform branding visual
Dan Barahona
API Testing

Top 5 Burp Suite Alternatives for API Security Testing

April 10, 2022
5 mins
Blog API security article illustration – tips for protecting your APIs
Dan Barahona
API Testing

Burp vs ZAP: Which Finds More API Bugs?

April 10, 2022
6 mins
Banking API security reference architecture – protecting financial systems illustration
Dan Barahona
FinTech

OCC 2023 Plan: What It Means for Banks & FinTech Security

April 10, 2022
5 minutes
Best pen testing tools image
Dan Barahona
API Testing

Best Pen-Testing Tools for Modern APIs

April 10, 2022
6 mins
APIsec infographic – API security best practices visual aid
Dan Barahona
API Security

API Testing Automation: How It Transforms DevSecOps

April 10, 2022
7 minutes
API monitoring risks – visual highlighting hidden dangers of monitoring APIs
Dan Barahona
API Testing

The Hidden Risks of API Monitoring That Leave APIs More Vulnerable

April 10, 2022
5 minutes
Image showing shift-left security process
Dan Barahona
API Testing

Shift Left Security: The Ultimate Guide

April 10, 2022
15 mins read
Shift left security concept – moving API security earlier in development
Dave Piskai
API Testing

Shift Left for DevOps: Key Benefits and 5 Best Practices to Follow

October 28, 2022
5 mins read
Shift left testing guide – software development lifecycle and early security practices
Dan Barahona
API Testing

Shift-Left vs Traditional Testing: Choosing the Best Approach

April 10, 2022
6 mins
Christine Bevilacqua
API Security

What is Broken Object Level Authorization (BOLA) and How to Fix It

March 21, 2023
6 mins
Penetration testing guide – illustrated overview of API pen testing steps
Dave Piskai
API Testing

Penetration Testing Best Practices for Every Stage of Testing

October 28, 2022
5 mins
Business constraint exploitation – API vulnerability infographic
Christine Bevilacqua
API Security

Business Logic Flaws in APIs: The Silent Threat

March 21, 2023
5 mins
HTTP verb tampering in APIs – hacking method and risk illustration
Wesley Meier
API Security

HTTP Verb Tampering: Key Risks and Fixes

May 18, 2022
6 mins
Sensitive data exposure illustration – safeguarding APIs against leaks and threats
Dan Barahona
API Security

Sensitive Data Exposure: What It Is and How to Avoid It

April 10, 2022
5 mins
Dave Piskai
Tutorials

How to Generate OpenAPI (OAS) Specs for REST APIs

October 28, 2022
4 min read
Dan Barahona
Business Logic

How to Address Business Logic Flaws During Application Design

April 10, 2022
5 min read
Wesley Meier
Business Logic

Business Logic vs Application Logic in APIs

May 18, 2022
6 min read
Dan Barahona
Business Logic

5 Real Business Logic Failures That Led to Major Breaches

April 10, 2022
6 min read
Dan Barahona
Business Logic

Why Business Logic Vulnerabilities Are Your #1 API Security Risk

April 10, 2022
6 min read
"x" icon
Get The Complete API Security Buyer's Guide [eBook]
Automate Your API Security.
APIsec University
CoursesResources
Events
APISEC|CONLive API Security WorkshopPrivate API Security Workshop
About
Who is APIsec?BlogCase StudesSupport
Copyright © 2024 APIsec.ai
Free License Agreement
Terms & Conditions
Privacy Policy