Improving API Security Posture.
summary
Built and deployed a dedicated API security solution that automatically discovers and inventories APIs, flags sensitive parameters, and captures forensic logs; the system immediately finds shadow APIs discovered and blocks business‑logic tampering attempts, allowing teams to blacklist rogue IPs and trace exploits. The team proves API gateways and WAFs miss many logic attacks, runs vendor POCs before purchase, maps APIs to regional compliance, and shifts effort from manual testing to automated monitoring and governance so remediation actually works.
AI-written summary · about
chapters (6)
- 0:00Introduction
- 6:10API Security Posture
- 14:33Security Team
- 18:09API Security
- 22:08Observations
- 25:01Questions
related talks
19mAvoid These API Security Pitfalls: Expert Insights
48mThe Need for Automation in API Security
22mLayered Approach of API Security Strategies and its Business Impact
59mFlying blind? - The case for API Security and Observability
24mAPI security, mitigate API abuses using machine learning
24mAPI Security in DevSecOps: Built-In, Not Bolted On
16mDo the Right thing, shift Left!
58mA Risk based Approach to API Security