API security resources

Explore resources related to API security, from white papers and webinars to blog posts and case studies. Find best practices and product information on making API security testing a permanent and efficient part of your web development and operations.

White Papers

API vulnerability testing in the real world: Best practices for building API security testing into your SDLC

Cover Your APIs – Securing Your Hidden Web Attack Surface

White Papers

Web API Security: Defending Your Hidden Attack Surface

Webinars

GraphQL API Security and DAST

Webinars

API Security Decoded: Insights into Emerging Trends and Effective AppSec Strategies

An integrated approach on demand webinar

Webinars

An Integrated Approach to Scanning Web APIs with DAST

Blog posts on API security

What’s missing from the OWASP API Security Top 10 2023

How to ensure REST API security

How APIs creep up on you – and how to stay secure regardless

Surviving the API Apocalypse: How to Defeat Zombie APIs

APIs make XSS prevention a frontend job

See more blog posts

Case studies related to API security

OpenCart – IT & Telecom “We are now more confident in our code thanks to scanning it with Invicti Enterprise. Knowing that we can deploy a test site and have it scanned for the latest security threats in just minutes does help ensure that we keep the most recent releases as secure as possible.

Allocate Software – Healthcare “Our goal is to provide an environment where our products are safe-by-design. That means having our DevSecOps team focus on a shift-left approach where we use tooling to help fill the gap of security experts, while also involving the human element for efficient and precise triaging.

Zen Internet – IT & Telecom “My interactions with Invicti have been incredibly positive. I know a great company when I see one. I would recommend working with this company to anybody, and the quality of the product

See more case studies

Support articles on API security

Overview of scanning APIs with Invicti

Scanning a RESTful API Web Service

Scanning a GraphQL API for vulnerabilities

Scanning SOAP API Web Services

Importing links and API definitions for scanning

See more support articles View all

Cover your entire web attack surface – including APIs – with Invicti’s web security scanner

Get a demo