Welcome to the 7th post in our weekly series on the new 2023 OWASP API Security Top-10 list, with a particular focus on security practitioners. This post will focus on API6:2023 Unrestricted Access to Sensitive Business Flows. In this series we are taking an in-depth look at each category – the details, the impact and what you can do about it.

AI has already revolutionized the way we work. ChatGPT, GitHub Copilot, and Zendesk AI are just a few of the tools that are taking over day-to-day tasks like generating customer support emails, de-bugging code, and much, much more. Yet despite all of these advancements, security teams are under more intense pressure than ever to mitigate rapidly evolving risks. Paired with a growing shortage of over 3.4 million cybersecurity workers, security teams are in need of a solution—and fast.

Organizations are tasked with the continuous challenge of having to keep up with advancing cyber threats and must change their security strategies for them to remain secure. Zero Trust Security is a response that demands identity validation from all users, devices, and networks, thus eliminating implicit trust altogether.