Search

Alexandra Charikova

Alexandra leads Growth & Community at Escape and hosts The Elephant in AppSec podcast, focusing on application security. She’s active in BSides Amsterdam, OWASP AppSec Days, and contributes security research featured in outlets like Help Net Security

Alexandra Charikova

Alexandra Charikova — Last Publications

Kickstart 2025 with New DAST Scanner Features

Product updates

Kickstart 2025 with New DAST Scanner Features

The start of a new year brings exciting updates to our DAST scanner! Our goal is simple: to improve testing accuracy by leveraging real, concrete examples of API requests when they might be required. While we don’t need to have direct access to live traffic to start in-depth testing, we’ve made it easier than ever to import and use traffic examples - giving you better results and more actionable insights (without performance overhead). Here’s a closer look at what’s new: Discover our ne

Alexandra Charikova

Alexandra Charikova

4 min read

Introducing Private Locations: Securely Scan Your Internal Applications

Product updates

Introducing Private Locations: Securely Scan Your Internal Applications

While public applications often receive focused attention, the reality is that many critical applications operate behind firewalls, VPNs, or in private networks. These internal apps can be just as vulnerable to attacks—but securing them without disrupting your infrastructure can be a challenge. Today, we’re introducing Private Locations, a new feature in Escape’s API security platform that allows you to discover, fingerprint, and scan your internal applications securely. With this feature, no A

Alexandra Charikova

Alexandra Charikova

3 min read

Fortune 1000 at risk: How we discovered 30k exposed APIs & 100k API vulnerabilities in the world’s largest organizations

Research

Fortune 1000 at risk: How we discovered 30k exposed APIs & 100k API vulnerabilities in the world’s largest organizations

Hey there! Next week, social media will be flooded with Thanksgiving feasts (and Black Friday deals). But before you dive into the holiday shopping madness, the Escape team has prepared a special treat for you—not a Black Friday deal on Escape, of course, but rather some impressive findings on API security risks among Fortune 1000 and CAC 40 organizations. And trust us, the findings aren’t just “spicy” like your Thanksgiving stuffing—they’re quite scary... Using a combination of advanced subd

Alexandra CharikovaMaxence LecanuQuentin LieumontGabriel Marquet

Alexandra Charikova, Maxence Lecanu, Quentin Lieumont, Gabriel Marquet

6 min read

API Security Day - powered by APIDays & Escape

API Security

API Security Day - powered by APIDays & Escape

Are you ready to dive deep into API security? Join Escape's team for a focused, one-day event at the APIDays Paris. Learn from industry leaders and discover the latest strategies and technologies to protect your APIs. Whether you're a cybersecurity professional, API developer, or API architect, this event offers a unique opportunity to learn from pioneers in the field, connect with peers, and discover the latest trends and strategies in API protection. When? December 5, 2024. Where? CNIT Fores

Alexandra Charikova

Alexandra Charikova

2 min read

The Schedule is Live: The Elephant in AppSec Conference

Application Security

The Schedule is Live: The Elephant in AppSec Conference

The Elephant in AppSec Conference agenda is live! It’s packed with sessions that dive into what’s broken in AppSec, how to fix it, and unique insights from top experts on the latest AppSec tooling. Prepare for bold opinions and fresh perspectives, where the best in Application Security come together like toast and butter. Save your spot now and stay tuned for more updates 🚀 Register now  Inside the Must-Attend Sessions * Tanya Janca: Shifting Left Doesn't Mean Anything Anymore Our job i

Alexandra Charikova

Alexandra Charikova

2 min read

Forrester's CISO Budget Planning Guide for 2025: Prioritize API Security

API Security

Forrester's CISO Budget Planning Guide for 2025: Prioritize API Security

As we head into 2025, planning a robust security budget is more critical than ever. According to Forrester's latest Budget Planning Guide for Security and Risk Leaders, one element stands out as indispensable: API security. APIs form the backbone of modern digital interactions, connecting services, platforms, and users. However, this growing reliance has also made them a prime target for attackers. Just in Australia, for example, new research by Thales has found that vulnerable APIs and bot at

Alexandra Charikova

Alexandra Charikova

10 min read

How API Security Fits into DORA Compliance: Everything You Need to Know

Compliance

How API Security Fits into DORA Compliance: Everything You Need to Know

With over 22,000 financial institutions and IT service providers now affected, the Digital Operational Resilience Act (DORA) represents an important shift in cybersecurity for the EU’s financial sector. DORA forces tighter collaboration between regulators, financial institutions, and third-party vendors. It’s not just about protecting internal systems anymore but ensuring the resilience of external digital connections, like APIs, which are the backbone of modern data flows. APIs have become th

Alexandra Charikova

Alexandra Charikova

7 min read

Product Updates: Persisted GraphQL Query Support

Product updates

Product Updates: Persisted GraphQL Query Support

You can now test the security of persisted GraphQL Queries with Escape's platform. This new capability enhances our GraphQL API security testing by providing deeper insights into vulnerabilities specific to persisted queries, enabling your team to protect your APIs from targeted attacks better. We support the following formats: * Apollo * Yoga * Custom implementations What are Persisted Queries? Persisted queries in GraphQL help to optimize network performance and enhance security. The c

Alexandra Charikova

Alexandra Charikova

2 min read

Our Latest Product Updates

Product updates

Our Latest Product Updates

We’re constantly improving our product for our customers. See the latest features, improvements, and fixes we have shipped over the past month. Customize your compliance view Last month we shipped a new feature designed to enhance your compliance management experience. It allows you to hide irrelevant compliance frameworks from your compliance matrix, tailoring it to your organization's specific needs. Don’t care about HIPAA because you are in financial services? You can hide it from yo

Alexandra Charikova

Alexandra Charikova

5 min read

Alexandra Charikova — Events, Talks & Papers

BSidesSF 2026 - More Role Models in AppSec: How to Get It Right (Alexandra Charikova)
YouTube
The State of Security of Vibe Coded Apps
Escape’s security team scanned 5.6k vibe-coded applications and found 2k high-impact issues & 175 instances of PII. Discover the full report.
What Your Exposed APIs Are Leaking - Alexandra Charikova
YouTube

Escape Blog Squad