Application programming interface (API) security refers to the practice of preventing or mitigating attacks on APIs. APIs work as the backend framework for mobile and web applications. Therefore, it is critical to protect the sensitive data they transfer.

In this session, we will be discussing what security testing is, the importance of security testing, basic standards, and a way to automate a workflow.

Takeaways from the talk:

• Fundamentals of API security testing
• OWASP ZAP the tool
• A closer look at integrating ZAP into the Azure Pipeline