[tptacek]

API security has been a big enough deal for a long enough time that OWASP has its own "Top 10" for API security.

https://owasp.org/www-project-api-security/

[cindreta]

We’re actually working on our own API security feature and OWASP Top 10 is wheree we started. The peoblem is - it’s almost impossible to automate some of those checks without human input. So we’re working to make it as smooth as possible