#api pen testing

[securetriad]

The What, Why, and How of API Penetration Testing

I have come to realise and appreciate, when having conversations about API Penetration Testing with colleagues and other professionals that not all understand what API is

If we had to draw a parallel with everyday life, let’s consider the post office. The postal system is a robust system in itself; made up of rules, codes, and policies, etc. that enable to function repeatedly for all mailing purposes. A person posts a package to be sent to another, and the recipient could be in the next block, or a different city, state, country, or continent. In any case, the postal system (API) can deliver the package (request) from one entity to another and deliver back a response.