praneeth132006

Detect Broken Authentication abuse (API2:2023) against an API from auth-endpoint telemetry and token-validation events — invalid-signature…

Detect Broken Object Level Authorization (BOLA / API1:2023) abuse against a REST or GraphQL API from access logs, gateway telemetry, and…

Assess Broken Authentication (API2:2023) in an API during an authorized test — JWT verification flaws, weak or missing token expiry…

Find and prove Broken Function Level Authorization (BFLA / API5:2023) in an API during an authorized test — reaching administrative or…

Find and prove Broken Object Level Authorization (BOLA / API1:2023) in a REST or GraphQL API during an authorized assessment.

Harden sensitive business flows against Unrestricted Access (API6:2023) and detect automated abuse.

Detect excessive data exposure (API3:2023) in an API from response telemetry and schema-diff analysis — endpoints returning sensitive…

Find and prove excessive data exposure (part of API3:2023) in an API during an authorized test — endpoints that return more object…

Detect Broken Function Level Authorization abuse (BFLA / API5:2023) against an API from access logs and role/route telemetry…

Discover Improper Inventory Management (API9:2023) during an authorized assessment — shadow, zombie, and deprecated API versions…

Detect and close Improper Inventory Management (API9:2023) for a REST or GraphQL API.

Find and prove mass assignment / Broken Object Property Level Authorization (API3:2023) in an API during an authorized test — setting…