DevSecOps is a variant of DevOps that adds security to the software development workflow. Application Programming Interfaces (API) security needs to be part of DevSecOps. This article explores how DevSecOps works and the role that API security plays in making applications that result from DevSecOps as secure as possible.

During my 34-year career in federal law enforcement, I repeatedly saw the damage data theft caused to unsuspecting victims. Whether the result was an elderly retiree losing their life savings, a company losing its intellectual property, or the military losing technology that took years to research and billions of dollars to fund.

Digital transformation (DX) is a technology paradigm that has proven powerful enough to survive several seasons of hype and still emerge as an enduringly valid business proposition. DX is about leveraging new digital technologies to change a company’s fundamental relationships with its customers and suppliers. It frequently means connecting legacy systems to cloud-native applications.

APIs are the foundation to digital transformation, forging connections between applications, platforms, and services. And whether they realize it or not, all of today’s modern businesses are managing thousands of APIs in their cloud and on-premises environments. However, this innovation comes with caution as APIs also present a rapidly expanding attack surface for security teams to monitor and protect.

Noname Security is excited to announce that our API Security Workshop will allow you to earn Continuing Professional Education (CPE) credits. That’s right! Noname has partnered with (ISC)2, the world's leading association for empowering cybersecurity professionals and is now an approved (ISC)2 CPE Submitter Partner. By attending our 4-hour API Security Workshop, you will receive 4 CPE credits.

Cloud companies that wish to do business with the United States federal government can only do so if they receive authorization under the Federal Risk and Authorization Management Program (FedRAMP). For a cloud service or product to get authorized through FedRAMP, its maker must demonstrate that it meets certain security standards. Given the importance and predominance of Application Programming Interfaces (APIs) in cloud computing, API security is a critical factor in achieving FedRAMP authorization.