Blog

API security resources

Explore resources related to API security, from white papers and webinars to blog posts and case studies. Find best practices and product information on making API security testing a permanent and efficient part of your web development and operations.

White Paper

Web API Security: Defending Your Hidden Attack Surface

White Paper

API vulnerability testing in the real world: Best practices for building API security testing into your SDLC

Webinar

API Security Decoded: Insights into Emerging Trends and Effective AppSec Strategies

Webinar

An Integrated Approach to Scanning Web APIs with DAST

Zen Internet – IT & Telecom

This case study explains how Invicti Enterprise helps Zen Internet build continuous security into their web application development process to keep their customers secure.

OpenCart – IT & Telecom

This case study explains how the OpenCart team integrated Invicti Enterprise's automated web vulnerability scans in the SDLC to develop more secure code.

Allocate Software – Healthcare

This case study explains how Invicti Security and Longwall Security help Allocate Software close gaps with updated tooling and automation.

Overview of scanning APIs with Invicti

Scanning a RESTful API Web Service

Scanning a GraphQL API for vulnerabilities

Scanning SOAP API Web Services

Importing links and API definitions for scanning