Harold Bell

Application programming interfaces (APIs) have become the backbone of modern digital ecosystems, fac..

Data classification refers to the process of categorizing data based on its sensitivity, importance,..

API authorization is a critical aspect of modern software development and data security. It refers t..

Artificial Intelligence (AI) is a branch of computer science that focuses on creating intelligent ma..

Auto-scaling, also known as automatic scaling or autoscaling, is a cloud computing feature that allo..

The Constrained Application Protocol (CoAP) is a specialized web transfer protocol designed for use ..

Machine learning (ML) is a field of study in artificial intelligence that focuses on developing algo..

A Remote Code Execution (RCE) vulnerability is a security flaw present in software or systems that a..

Malicious code, also known as malware, is a term used to describe any piece of software or code that..

An on-path attacker, also known as a network-based or eavesdropping attacker, is someone who interce..

An API spec, short for application programming interface specification, is a document that describes..

Agent-based API security is an approach to securing application programming interfaces (APIs) by imp..

A black hat hacker refers to an individual with exceptional computer skills who uses their expertise..

Out-of-band API security is an approach that focuses on securing communication channels and data flo..

When it comes to designing APIs, application programming interfaces, two popular options that often ..

Endpoint security is a crucial aspect of cybersecurity that focuses on protecting the endpoints, suc..

A white hat hacker, also known as an ethical hacker or a security researcher, is an individual who u..

A teardrop attack is a type of cyber attack that aims to disrupt or crash computer systems by sendin..

As technology continues to advance, so too do cybercriminals’ methods for targeting unsuspecting v..

Backdoor attacks are a type of cyber-attack that allows an attacker to gain unauthorized access to a..

WADL stands for Web Application Description Language and it’s an XML-based language used to descri..

A race condition occurs when two or more processes or threads are trying to access and manipulate sh..

Are you familiar with the terms ‘white hat’ and ‘black hat’ hacking? If not,..

A content delivery network (CDN) is a crucial part of any website’s infrastructure, allowing i..

CAPTCHA, which stands for “Completely Automated Public Turing test to tell Computers and Human..

A man-in-the-middle (MITM) attack refers to a malicious technique in which an unauthorized third par..

Attack Surface Management (ASM) is one of those concepts in IT and cybersecurity that most of us und..

The phrase “shadow API” sounds mysterious, maybe even dangerous. In reality, shadow APIs are not..

People who work in IT and cybersecurity may think of cloud security posture management (CSPM) as a t..

If your mother ever told you to sit up straight at the dinner table, then you’ll understand that p..

Learn the meaning of tight and loose coupling and gain insights into what’s good about each approa..

The OWASP API Top 10 is a classification of the most common API vulnerabilities. Understand the bigg..

Learn what API security testing is why it's important and the vulnerabilities it can uncover. Get re..

To succeed with API compliance organizations must ensure that they're protecting any sensitive data ..

Learn what a digital attack surface is how to reduce it for threat mitigation as well as the differe..

Learn what API abuse is the types of API abuse the consequences of API abuse as well as how to preve..

A service mesh is a layer of infrastructure that manages communications between microservices over a..

Learn what data exfiltration is how it occurs the types of data exfiltration as well as how to preve..

APIs handle significantly higher volumes of requests at different times. To meet increases in traffi..

DevSecOps is a software development practice that adds security (Sec) to DevOps. DevOps combines sof..

Learn what defense in depth (DiD) is why it's important how it works as well as how layered security..

Discover what Java API is the need for it who uses it as well as the types of different Java APIs.

Learn what a computer security incident response team (CSIRT) is how it works as well as best practi..

In SAML (Security Assertion Markup Language) the key word is assertion.

The purpose of CI/CD is to help organizations work faster and more accurately so they can rollout cr..

Learn what identity and attack management is why it's important how it works as well as the technolo..

Learn what rate limiting is why it's important how rate limiting works and the types of rate limits.

API governance is the practice of making all APIs subject to a common set of rules standards and sec..

Get an in-depth overview of data security including how it works who's responsible for it and how it..

Application programmable interfaces or APIs are vital for digital transformation. Learn what APIs ar..

Discover what multi-factor authentication (MFA) is how it works how it keeps user credentials secure..

Learn what a product security incident response team (PSIRT) is why it's important as well as best p..

Learn what a security operations center (SOC) is what it does its roles and responsibilities as well..

Securing application programming interfaces (APIs) can be challenging. Use this checklist to establi..

Lack of resource and rate limiting ranks 4th on the list of OWASP Top 10 API security risks. Learn w..

Learn how the right plans can help you continue its operations in the event of a major disruption su..

Attack vectors are methods or pathways hackers use to gain illegal access to a computer system or ne..

Using JSON-RPC an application can send a message to another application requesting that it perform a..

API authentication is critical for API security. It is a process that verifies the identities of use..

Without proper safeguards REST APIs represent a vulnerable attack surface. Explore the most common a..

Penetration testing (or pen testing for short) involves performing simulated fully authorized attack..

API gateways and service meshes have a number of things in common but they are different technologie..

Understand the benefits of API management how API management works and how to choose the right API m..

Discover what an API key is how they work how to keep them secure as well as the difference between ..

Business logic maps how the various parts of a business work together in real life. Discover why man..

Learn what the most common types of API calls are and how best to keep them secure against malicious..

Learn the difference between modern API security testing tools and traditional application security ..

A load balancer functions like a network “traffic cop” routing client requests such as for web p..

The Software Development Lifecycle is a framework for creating deploying and retiring software. We e..

The term DevOps refers to a set of practices that combines software development (Dev) and IT operati..

APIs Webhooks and WebSockets each have a favored type of use case.

Learn what API discovery is why it's important and why having an accurate inventory of your all your..

Fuzz testing or fuzzing introduces deliberately malformed inputs into a system with the goal of trig..

Though API gateways provide basic API security controls they unfortunately are not enough to adequat..

Discover how Noname Security provides superior API protection when compared to web application firew..

Discover how the latest API security best practices enhance your API security posture and enable you..

API Security is a programmatic approach to protecting APIs from the unique security risks and vulner..

A Web Application Firewall is a security device designed to protect at the application level. Get an..

Evaluate legacy application security tools from Salt Traceable Wallarm and more against the best-in-..

Learn more about static application security testing (STAT), a white-box method for early detection ..

Learn what OpenAPI is what it does and how it works. We'll also explore some of the more notable rea..

Broken Object Level Authorization is the top API security vulnerability according to OWASP. Learn ho..

Noname Security provides unmatched API protection when compared to runtime protection solutions from..

Software Composition Analysis (SCA) is a process which identifies precisely what has been used in a ..

Discover why API runtime protection the foundation for identifying and blocking threats to your APIs..

See why Noname is the preferred API security vendor when compared to tools that only test APIs like ..

Learn what Dynamic Application Security Testing (DAST) is discover the benefits and limitations and ..

Discover how attackers exploit weaknesses in API user authentication to compromise accounts and make..

Excessive data exposure ranks 3rd on the list of OWASP Top 10 API security risks. Learn what it is a..

Learn about Simple Object Access Protocol (SOAP) what it does where it can be effective and the vuln..

Learn what a denial of service attack is the types of attacks how they are conducted and how to prot..

GraphQL is a query language for APIs that allows you to express requests concisely. Learn why its po..

Learn what microservices are how they help improve application functionality and enable developers t..

APIs, also known as application programming interfaces, serve as the backbone of modern software app..

Finding API flaws before production is crucial for the success of any project. Not only does it ensu..

One of the main reasons why detecting suspicious API traffic is so significant is the potential thre..

In recent years, there has been a significant rise in the number of API attacks, posing a growing th..

In today’s fast-paced development environment, a comprehensive API security testing strategy i..

The Black Hat Conference has gained a reputation for being a platform where groundbreaking research ..

As you probably noticed, our company has just undergone a major facelift. Though our name and logo r..

Application programming interfaces (APIs) have become an essential component of modern applications ..

This blog highlights how Gartner’s new report, Everything You Should Do to Address API Security, i..

Application programming interfaces (APIs) are becoming increasingly important for businesses to stay..

API sprawl is a term used to describe the uncontrolled proliferation of APIs across an organization...

Why Enterprises Need API Security Enterprises face a challenging environment: economic headwinds, ef..

Data privacy laws and compliance regulations are critical safeguards for protecting consumer and emp..

Digital transformation has ushered in a new era of devices, applications and online services. And th..

Smart retailers are checking their cybersecurity lists twice to be sure they’re protecting the big..

Organizations are achieving new levels of connectivity, productivity and agility through the use of ..

Multi-cloud security and application delivery vendor F5 identified 43 security vulnerabilities impac..