Enjoying our content? Subscribe:
COMPREHENSIVE API SECURITY
API Security Resource Center
API Security is still in an infancy stage so we have two different challenges: getting API security in the right time (convincing top management) and getting it in the right way.
1. Communicating API Security
Communication is a key for successful delivery of an information security program, and API security is not an exclusion. You can find our rating of TOP-10 API security breaches and flaws here.
2. API Security Guides
API Security program requires thorough design and you can use the following materials for it:
- For founders, management roles or product owners - our Fintech Founders Guide on MVP Security
- For information security officers - our TOP-12 API Security Controls
- For developers - API Security Checklist and our API rate limiting guide
- For security architects - OWASP TOP-10 API
- For penetration testers - awesome API Security list and 9 Open-Source API Security Testing & Manipulation Tools
3. API Security Tools - Comparisons
In some cases, built-in API security controls just aren't enough. There you can discover eight our comparisons of some most well-known API security tools\suites:
- Data Theorem vs Traceable
- apisec vs Data Theorem
- apisec vs IMVision
- apisec vs Traceable
- Data Theorem vs 42Crunch
- sqreen vs IMVision
- 42Crunch vs IMVision
- 42Crunch vs sqreen
Afterword
There you can find all kinds of materials - design and development checklists, guide for founders and tools comparisons. I hope it was usable for you, but if you don't have time to check it all out - check out our API penetration testing service and we might be your API security problem solvers.
Alex Bodryk
Cyberlands, Co-founder & managing director