The State of GraphQL Security 2023

GraphQL has become the go-to choice for modern application development, allowing clients to request exactly what they need from backend services.

By analyzing 1500+ GraphQL endpoints, we have identified the most pressing security issues faced by organizations using GraphQL for their APIs.

This report aims to provide an overview of the results, highlighting key vulnerabilities, trends, and best practices. It has been written with CISOs, CTOs, VP Engineering, and VP Product Security in mind to help them address these security concerns effectively.