API Security - Escape - The API Security Blog

Tagged

API Security

A collection of 63 posts

Fortune 1000 at risk: How we discovered 30k exposed APIs & 100k API vulnerabilities in the world’s largest organizations

Application Security

Fortune 1000 at risk: How we discovered 30k exposed APIs & 100k API vulnerabilities in the world’s largest organizations

Hey there! Next week, social media will be flooded with Thanksgiving feasts (and Black Friday deals). But before you dive into the holiday shopping madness, the Escape team has prepared a special treat for you—not a Black Friday deal on Escape, of course, but rather some impressive findings on

The Elephant in AppSec Talks Highlight: Reinventing API Security

Highlights from Escape's talks at The Elephant in AppSec Conference on the challenges of API security and how Escape is overcoming these

API Security Day - powered by APIDays & Escape

API Security Day - powered by APIDays & Escape

Are you ready to dive deep into API security? Join Escape's team for a focused, one-day event at the APIDays Paris. Learn from industry leaders and discover the latest strategies and technologies to protect your APIs. Whether you're a cybersecurity professional, API developer, or API architect,

Top Traceable API Security Alternative: Escape vs. Traceable

Competitor Comparison

Top Traceable API Security Alternative: Escape vs. Traceable

Learn why Escape’s agentless discovery and developer-friendly testing make it a top Traceable alternative.

Top Qualys Alternative: Escape vs Qualys

Competitor Comparison

Top Qualys Alternative: Escape vs Qualys

Discover why Escape is a better DAST alternative to Qualys for API testing.

Escape vs Invicti

Escape vs Invicti

Discover why Escape is a better API security solution.

Forrester's CISO Budget Planning Guide for 2025: Prioritize API Security

Forrester's CISO Budget Planning Guide for 2025: Prioritize API Security

As we head into 2025, planning a robust security budget is more critical than ever. According to Forrester's latest Budget Planning Guide for Security and Risk Leaders, one element stands out as indispensable: API security. APIs form the backbone of modern digital interactions, connecting services, platforms, and users.

Escape vs Salt Security

Competitor Comparison

Escape vs Salt Security

Discover why Escape is a better API security solution.

How API Security Fits into DORA Compliance: Everything You Need to Know

How API Security Fits into DORA Compliance: Everything You Need to Know

With over 22,000 financial institutions and IT service providers now affected, the Digital Operational Resilience Act (DORA) represents an important shift in cybersecurity for the EU’s financial sector. DORA forces tighter collaboration between regulators, financial institutions, and third-party vendors. It’s not just about protecting internal systems anymore

Escape vs Cequence Security

Escape vs Cequence Security

Discover why Escape is a better API security solution.

Escape vs Rapid7

Escape vs Rapid7

Discover why Escape is a better API security solution.

Escape vs Noname Security (recently acquired by Akamai)

Escape vs Noname Security (recently acquired by Akamai)

Discover how Escape helps implementing API Security faster and with lower overhead than traffic-based solutions like Noname Security.

How Escape’s agentless API discovery technology works

How Escape’s agentless API discovery technology works

Discover what makes Escape's agentless API discovery technology truly innovative.

Reinventing API security: Why Escape is better than traditional DAST tools

Reinventing API security: Why Escape is better than traditional DAST tools

We have been doing API Security wrong. Discover how the limitations of DAST API security tools might impact your security and why Escape's technology is the best way to protect your APIs.

Reinventing API security: Why Escape is better than traditional traffic-based tools

Reinventing API security: Why Escape is better than traditional traffic-based tools

We have been doing API Security wrong. Discover how the limitations of traffic-based API security tools might impact your security and why Escape's agentless technology is the best way to protect your APIs.

The State of GraphQL Security 2024

The State of GraphQL Security 2024

Insights from 13,000 GraphQL API issues: Read our deep dive into the current state of GraphQL security.

Introducing the API Threat Landscape, a new resource for API security researchers

Introducing the API Threat Landscape, a new resource for API security researchers

Since 2022, Escape's security research team has been tracking API-related data breaches. We’ve decided to make our database public, providing detailed insights into primary attack vectors, threat actors, tools, and techniques. The database is updated every two weeks.

Limitations of current automatic specification generation tools

Limitations of current automatic specification generation tools

Have you ever wondered how automatic specification generation can streamline API security scanning? By significantly reducing the manual effort involved in creating and maintaining API specifications, automated tools offer clear benefits in terms of scan accuracy and setup time. Yet, many existing tools on the market have notable limitations. Understanding

Vulnerabilities prioritization funnel: Focus on what matters

Product updates

Vulnerabilities prioritization funnel: Focus on what matters

We are excited to announce updates to our vulnerability prioritization funnel, which will help you focus on vulnerabilities that pose a real danger to your business.

We benchmarked DAST products, and this is what we learned

We benchmarked DAST products, and this is what we learned

When we started, we wanted to understand how to validate the quality of Escape's scanner findings and be able to benchmark them. Dynamic application scanning solutions are notorious for not being able to scan complex vulnerabilities, specifically the business logic vulnerabilities, and other deficiencies, and even though we

How to secure GraphQL APIs: challenges and best practices

GraphQL Security

How to secure GraphQL APIs: challenges and best practices

GraphQL APIs, while offering robust features and flexibility, present unique security challenges compared to traditional REST APIs. This article delves into the complexities of securing GraphQL APIs, highlighting common vulnerabilities and providing a comprehensive guide to best practices for building secure GraphQL apps. A visual learner? Check out our latest

DAST is dead, why Business Logic Security Testing takes center stage

DAST is dead, why Business Logic Security Testing takes center stage

“DAST is dead”—that’s the phrase that appears every year on social media and in cybersecurity newsletters. But what if in 2024, it finally came true? DAST, Dynamic Application Security Testing (even though we see a new terminology “Dynamic API Security Testing” popping up here and there within the

Escape's proprietary Business Logic Security Testing algorithm: what makes it innovative

Escape's proprietary Business Logic Security Testing algorithm: what makes it innovative

Testing APIs for Business Logic vulnerabilities is hard. Actually, this is a mission that old-school DAST solutions like ZAP (formerly OWASP ZAP) cannot handle. I'm Antoine Carossio, passionate about Computer Science for more than 15 years now and cofounder & CTO of Escape. With my team, we'

DAST Scanner: New features and improvements

Product updates

DAST Scanner: New features and improvements

We are excited to announce the updates to our DAST scanner, helping you achieve improved performance and obtain better results when testing your APIs.

[Webinar] How to secure GraphQL

[Webinar] How to secure GraphQL

Join Uri Goldshtein and Tristan Kalos for a webinar on GraphQL security and learn to secure your GraphQL APIs.