API Security

This Halloween, we’re gonna imagine the scariest thing possible: a world that is…suddenly…without APIs! Imagine it. You’re used to scrolling your smartphone, connecting to maps, music, and other apps in your car. You can order ahead on your phone, you can email any...

This week brought us the Uber Conviction, new CISA rules on asset discovery scanning, and more details in the ransomware attack on the Los Angeles School District.   Uber’s former chief security officer convicted over cover-up of 2016 data breach where hackers...

Traceable’s own Andrew Wesbecher discussed the importance of API security in the new, API-driven landscape of software development.

When people think of software architecture, they often picture layers of code. But in recent years, there's been a shift from this model—known as the monolithic approach—toward a more modular development style. This new approach, known as microservices, has given rise...

The Black Hat Conference for 2022 has concluded and, once again, there was no shortage of new emerging security technologies, informative sessions, and broader concerns surrounding APIs, data security, the software supply chain and code security. The conference was...

Zero trust security is the best answer to modern security threats. Learn how to adopt a zero trust security model in your applications and how Traceable AI can help.

It’s difficult to implement all the best practices for every possible attack vector, especially since new vulnerabilities are always being discovered. That doesn’t mean you shouldn’t try.

This post will walk you through how to create a next js serverless app from scratch. You’ll learn how to combine and use Next.js and MongoDB.

MITRE takes a step back and looks at the behavior of an attacker instead of just a specific signature or IP address. It looks from the attacker perspective and discerns the behavior.

This year’s RSA Conference was the first time that API Security became a primary focus.

Shift left is not just about shifting your tools and process but the knowledge as well.

What are GraphQL Fragments? How can you take advantage if them to write cleaner code and more efficient applications? Find out here.

Agents-based gathering methods have evolved and matured to listen for and record deeper and wider to ascertain more data-driven insights and analysis. 

In this post, we’ll look at API latency including how you measure it, the difference between API response time and API latency, and more.

The beginning of defining a framework for what requirements a good API security solution should meet. Intended to encourage a healthy discussion and be a tide that lifts all boats in getting to a more secure API-driven future.

Organizations must understand all the APIs in their ecosystems, as well as the specific risks associated with each of them to both detect and protect against attacks.

Thinking about how to secure microservices? In this article you’ll find 6 things you can’t forget when it comes to microservices security.

Serverless vs containers: Which one is right for your application? Learn more about these two main approaches to deploying applications.

This post explains what a CRUD API is and how to apply it to different use cases to protect and interact with data in very specific ways.

We now have advanced tools that can make threat hunting easier and more accessible. In this post, learn about 5 threat hunting tools for API security.

Learn what DDoS is and what it can do to your API endpoints, how to mitigate DDOS attacks, and build a security response.