DEV Community

#apisecurity

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Gatus status pages: public observability versus authenticated API control

Gatus status pages: public observability versus authenticated API control

Comments
3 min read
Documenso discovery and the team-scoped signing API boundary

Documenso discovery and the team-scoped signing API boundary

Comments
3 min read
Deploying a Small Python API Responsibly

Deploying a Small Python API Responsibly

Comments
3 min read
YetiForce application matches outnumber visible titles

YetiForce application matches outnumber visible titles

Comments
3 min read
OpenAPI security schemes describe credentials while servers enforce authorization

OpenAPI security schemes describe credentials while servers enforce authorization

Comments
3 min read
HTTP Message Signatures need a canonical request, not a collection of headers

HTTP Message Signatures need a canonical request, not a collection of headers

Comments
3 min read
Northflank Breach Exposes AI API Keys

Northflank Breach Exposes AI API Keys

Comments
3 min read
API Returns Too Much Data? The Window Envelope Call

API Returns Too Much Data? The Window Envelope Call

Comments
4 min read
Traefik dashboard discovery should start with the insecure API setting

Traefik dashboard discovery should start with the insecure API setting

Comments
3 min read
Asked to Review API Security, Don't Know Where to Start?

Asked to Review API Security, Don't Know Where to Start?

Comments
4 min read
API Authentication Failures: Checks to Run Before You Blame the Rate Limiter

API Authentication Failures: Checks to Run Before You Blame the Rate Limiter

Comments
2 min read
Swagger UI on 229,632 titles: the API documentation that publishes more than intended

Swagger UI on 229,632 titles: the API documentation that publishes more than intended

Comments
2 min read
Why API Gateways Keep Failing Authentication: Lessons From Cisco ISE CVE-2026-76460

Why API Gateways Keep Failing Authentication: Lessons From Cisco ISE CVE-2026-76460

Comments
3 min read
Defending Against OWASP Top 10 API Security Vulnerabilities in Modern Backend Services

Defending Against OWASP Top 10 API Security Vulnerabilities in Modern Backend Services

Comments
8 min read
SCIM Endpoint Security: How to Lock Down a Provisioning API Before It Leaks Your Directory

SCIM Endpoint Security: How to Lock Down a Provisioning API Before It Leaks Your Directory

Comments
8 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.