API

7 posts

Understanding Access Control Models: RBAC, ABAC, and DAC
Product Security

Understanding Access Control Models: RBAC, ABAC, and DAC

Different models of access control offer unique methods and benefits. The three primary models are Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), and Discretionary Access Control (DAC).
Escape - Offensive Security
Escape - Offensive Security
3 min read
Escape API Security Checklist
API Security

Escape API Security Checklist

Are you looking to make your API security program stronger? Do you sometimes find it challenging to spot and address security vulnerabilities effectively? You're not alone! Many security professionals like you face challenges in improving API security because technology and cyber threats keep changing. This makes ensuring strong
Tristan Kalos
Tristan Kalos
1 min read
What is an API attack, and how to prevent it?
API

What is an API attack, and how to prevent it?

Explore common API attacks, understand their significant risks, and learn how to prevent them.
Sophie Boulaaouli
Sophie Boulaaouli
5 min read
API Catalog & API Portal: A handbook of everything you should know
API

API Catalog & API Portal: A handbook of everything you should know

Discover the importance of API catalogs, their differences from API portals & gateways, and how to ensure optimal API management and security.
Nohé Hinniger-Foray
Nohé Hinniger-Foray
9 min read
CSRF vs XSS: What is the difference?
Best Practices

CSRF vs XSS: What is the difference?

Web safety matters. XSS is like sneaky bad notes, while CSRF tricks sites as if it's you. Both misuse website trust. We'll explore how they work and how to protect sites, including using CSRF tokens. Learn about online security with us!
Swan Beaujard
Swan Beaujard
8 min read
How to automate API Specifications for Continuous Security Testing (CT)
REST

How to automate API Specifications for Continuous Security Testing (CT)

While GraphQL APIs are growing in popularity due to their flexible query capabilities, REST currently remains the dominant architectural style for building web APIs. Unlike GraphQL, traditional REST technologies do not inherently provide an interactive schema that clients can use to explore the API. At Escape, we decided to use
Younes Haddou
Younes Haddou
5 min read
APIRank.dev: we scanned and ranked 6031+ public APIs on the internet
Announcement

APIRank.dev: we scanned and ranked 6031+ public APIs on the internet

tl;dr we scanned 6031+ public APIs on the internet with our in-house feedback driven exploration tech and ranked them using security, performance, reliability, and design criteria. The results are public on APIrank.dev. You can also request to index your own API for free and see how it compares
Tristan Kalos
Tristan Kalos
3 min read