OWASP API Security Top 10 Explained

APIs have become one of the most important parts of the infrastructure of modern organizations. They connect our digital applications, spur business innovation, and are a key part of meeting the high demands of today’s picky customers. Because they are so common and important, they have brought in an era in which seamless interaction and instant access to data are the norm.

But there is a darker side to this growth in the use of APIs. With their always-watchful eyes, cybercriminals have caught on to the weaknesses of APIs and marked them as valuable targets. Gartner predicted that hackers would change their focus, saying, “By 2022, API abuses will go from being rare nuisances to being the main way that large data breaches happen in enterprise web applications.” Their prediction was eerily true.

The Open Web Application Security Project (OWASP), a community that works to improve software security, put out its first API Security...