APIs are increasingly targeted attack vectors.
Common API Vulnerabilities
- Broken authentication
- Excessive data exposure
- Lack of rate limiting
- Mass assignment
- Injection attacksSecurity Controls
- OAuth 2.0 / JWT tokens
- API gateway
- Input validation
- Rate limiting
- Schema validationTools
- OWASP ZAP
- Burp Suite
- Postman security tests
- 42Crunch
- Salt Security