Dynamic application testing and API security
DAST & API security articles
Practical guides to authenticated DAST, route coverage and API inventory: verify what was tested, what is exposed and what remains unknown.
Dynamic testing and API inventory answer complementary questions about a running application. These guides explain how to verify scan authentication and session continuity, compare declared and implemented routes, and retain evidence for scoped security reviews.
- SSRF prevention: review a webhook delivery workerReview SSRF prevention in webhook workers with destination controls, redirect handling, isolated tests and evidence for release decisions. · Sujan Singh
- API authorisation: test your tenant boundariesBuild API authorisation tests around identity, tenant, object and action, using controlled fixtures to verify both allowed operations and denied access. · Sujan Singh
- API inventory: find undocumented endpoints safelyBuild an API inventory from specifications, source routes and deployment evidence, then assign ownership and review undocumented or retired endpoints. · Sujan Singh
- Authenticated DAST: prove what your scan reachedCheck authenticated DAST coverage with session verification, role-specific routes and a reproducible test record before trusting a quiet scan report. · Sujan Singh
See it on your stack
See connected security in action.
Explore the workflow with your engineering, security and compliance teams. No repository access is needed for the initial demonstration.