Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Understanding the NCSC's New API Security Guidance

Legislative, regulatory, and advisory bodies the world over are waking up to the importance of API security. Most recently, the UK’s National Cyber Security Centre (NCSC) has published detailed guidance on best practices for building and maintaining secure APIs. In this blog, we’ll break down that guidance and explore how Wallarm’s platform can help you align with each one.

The CISO's API Security Paradox: High Priority, Huge Blind Spots

In today’s digital-first world, APIs serve as the core infrastructure of modern business. They power mobile applications, facilitate critical cloud integrations, and support digital transformation initiatives. It's therefore understandable that 73% of CISOs consider API security a top or critical concern. However, a recent survey of 300 security leaders uncovers a troubling paradox: a large gap between awareness and action.

Inside the AI Threat Landscape: From Jailbreaks to Prompt Injections and Agentic AI Risks

AI has officially moved out of the novelty phase. What began with people messing around with LLM-powered GenAI tools for content creation has rapidly evolved into a complex web of agentic AI systems that form a critical part of the modern corporate landscape. However, this transformation has given new life to old threats, transforming the API security landscape all over again.

What CISA's BOD 25-01 Means for API Security and How Wallarm Can Help

The US government has taken another significant step towards strengthening cloud security with the release of CISA’s Binding Operational Directive (BOD) 25-01. Aimed at improving the security posture of federal cloud environments, BOD 25-01 mandates robust configuration, visibility, and control across cloud-based services. While the directive doesn’t explicitly name API security, securing modern cloud systems relies on securing APIs - including the ones security teams don’t know about.

API Security Testing Checklist for Developers

APIs are the backbone of modern applications, facilitating seamless communication and data exchange. However, this ubiquity makes them prime targets for cyberattacks. As developers, building robust and secure APIs isn't just a best practice; it's a critical responsibility. This blog post provides a comprehensive API security testing checklist to help you identify and mitigate API vulnerabilities, ensuring your APIs are fortified against evolving threats.

API Discovery: Uncover Hidden Endpoints Before Attackers Do

APIs are targeted 43% more often than websites and suffer 160% more DDoS attacks. Undocumented shadow APIs and zombie endpoints expose your business to breaches. In this video, learn how comprehensive API discovery reveals hidden and outdated endpoints, reduces blind spots, and helps you secure your API landscape before attackers find their way in.

Protecting Digital Transactions with API and Web Application Security

Protecting Digital Transactions with API and Web Application Security In this video, A10 Networks' Jamison Utter and Gary Wang discuss why a different approach to security is required beyond purely transactional-based protection and detection. They delve into how entity-based tracking helps address the challenges of legitimate-looking requests that carry malicious intent, particularly in the context of Application programming interfaces (API) security and advanced threats, such as Layer 7 DDoS attacks.