owasp-api-top-10

API penetration testing: a guide to the OWASP API Security Top 10, scoping and preparation

How API penetration testing works (REST, GraphQL, gRPC): the OWASP API Security Top 10 as a coverage map, how to scope, what to hand the testers…

BOLA in APIs: why it is still the #1 finding and how we chain it into other customers’ data

Broken Object Level Authorization has led the OWASP API Top 10 for years and remains the most common critical finding in our API pentests. The mechanism,…