Ask HN: How do you test the security of your API?

by mgl on 4/26/2023, 8:51 PM with 1 comments

There are various security tools targeting standard web applications but how do you test the security of your APIs, e.g. when powering your mobile or frontend apps?

What practical tools would you recommend and why?

  • by joshxyz on 4/27/2023, 12:40 PM

    my favourites are

    - owasp cheatsheets

    - latacora cryptographic right answers, and their other blog posts