No API Left Untested: Shift Left with API Security
summary
Demo builds an API on an Azure Linux VM, runs Noname Active Testing through an Azure API Manager and directly to the VM, and feeds a sensor plus Azure diagnostic logs into a Noname ML engine integrated with Azure DevOps, GitHub and JFrog. Pipeline runs a CLI scanner, enforces a medium blocking threshold to stop deploys, and produces Continuous Automated Red Teaming results. Live scan finds 2 broken function‑level auth, 15 misconfigs, 13 broken auths and 3 swagger mismatches; marketplace and Sentinel integrations are available.
AI-written summary · about
chapters (6)
- 0:00Introduction to API security
- 1:00API security risks
- 2:54Active testing solution
- 5:48Live demonstration
- 14:26Shift left methodology
- 17:22Marketplace and conclusion
related talks
49mAzure DevOps security - Lessons learned
44mAzure DevSecOps
41mBuilding better security for your API platform using Azure API Management
48mNavigating the depths of API security testing
46mAutomated Testing Using Azure DevOps
01h 02mDemystifying Web API Security in Azure
45mAPI Security: Acting Now to Enable Security Controls
16mLeveraging Azure AI Foundry to Build Intelligent Release Agents