Api Security

Explore recommended reads, summarized by AI

Authentication and Authorization

Technical approaches to verifying identity and controlling access in API systems.

JWT and API Scopes

Implementation Guides

Practical instructions for building secure API systems across platforms and frameworks.

Securing Backend APIs

Security Testing and Vulnerabilities

Accounts of discovering flaws and debates over security testing approaches.

Vulnerability Discovery and Testing

Popular this week

Rormsbee

API Pentesting

May 22

0xSinsber

The Hidden IDOR Vulnerability in /me/ API Endpoints

Nov 1

Aditya Ramaswamy

From Client Secrets to Certificates — Implementing OAuth2 mTLS Authentication with Keycloak

May 27

OSINT Team

Deepanshu Deep

How I Earned a $1,000 Bounty by Exploiting a Simple IDOR

Aug 26

Faiz Akram

API Security: A Practical Guide for Business Leaders

Nov 4

Latest stories

Leyla Mammadova

OWASP #4: Unrestricted Resource Consumption (When Rate Limits Aren’t Enough)

13h ago

Leyla Mammadova

OWASP #2: Broken Authentication (Leaving the Front Door Wide Open)

17h ago

Protagonist | Offensive Security

HTB API Hacking: Skill Assessment Full Walkthrough

18h ago

Ibtihaj_jalil

API Security Uncovered: Practical Testing with vAPI

19h ago

Brekaai

Dmytro Khirnyi

The key you shipped to every visitor

23h ago

See more stories

Api Security

Authentication and Authorization

JWT and API Scopes

Implementation Guides

Securing Backend APIs

Security Testing and Vulnerabilities

Vulnerability Discovery and Testing

Popular this week

API Pentesting

The Hidden IDOR Vulnerability in /me/ API Endpoints

From Client Secrets to Certificates — Implementing OAuth2 mTLS Authentication with Keycloak

How I Earned a $1,000 Bounty by Exploiting a Simple IDOR

API Security: A Practical Guide for Business Leaders

Latest stories

OWASP #4: Unrestricted Resource Consumption (When Rate Limits Aren’t Enough)

OWASP #2: Broken Authentication (Leaving the Front Door Wide Open)

HTB API Hacking: Skill Assessment Full Walkthrough

API Security Uncovered: Practical Testing with vAPI

The key you shipped to every visitor

Who to follow

Popular this week

API Pentesting

The Hidden IDOR Vulnerability in /me/ API Endpoints

From Client Secrets to Certificates — Implementing OAuth2 mTLS Authentication with Keycloak

How I Earned a $1,000 Bounty by Exploiting a Simple IDOR

API Security: A Practical Guide for Business Leaders

Latest stories

OWASP #4: Unrestricted Resource Consumption (When Rate Limits Aren’t Enough)

OWASP #2: Broken Authentication (Leaving the Front Door Wide Open)

HTB API Hacking: Skill Assessment Full Walkthrough

API Security Uncovered: Practical Testing with vAPI

The key you shipped to every visitor

Who to follow