Category
API Security
The contract you shipped, not the happy example. Lint the file. Fuzz a host you own. A proxy scan is not a property fuzzer. Open a shortlist for the buy you are making.
Shortlists
API security tools
We split API tools by fuzzing the contract you shipped. A happy-path collection is not a negative test.
Shortlists
GraphQL security
We split GraphQL tools by the query bound. REST fuzzers are the other list.
Shortlists
API gateways
We split gateways by holding the front door. Object-level authz is Application Security.
More categories
Questions about API Security
Does a collection replace a fuzzer?
No. A happy-path collection is not a negative test.
Is GraphQL just REST with extra fields?
No. The bound is the query. Open the GraphQL list.
Where does object-level authz sit?
The library is Application Security. A 500 from a fuzzer is not that check.
