Search

Swan Beaujard

Swan is a security software engineer at Escape, specializing in DAST and Threat Intelligence. He is a core contributor to open-source projects focused on GraphQL security and reverse engineering.

Swan Beaujard

Swan Beaujard — Last Publications

Methodology: How we discovered over 18,000 API secret tokens

API Security

Methodology: How we discovered over 18,000 API secret tokens

Hey there! It's just the beginning of the year, but our security research team has been working hard to identify current API security challenges. So for the Escape team, January went under the tagline "API secret sprawl" (we thought it was more fun than"Dry January", and we hope you agree with us 😉). If you're in the security field, you might mention that the beginning of the year usually marks the release of all "State of.. " reports, taking a look at the past year's trends. Instead of coll

Swan BeaujardAlexandra Charikova

Swan Beaujard, Alexandra Charikova

6 min read

CSRF vs XSS: What is the difference?

Best Practices

CSRF vs XSS: What is the difference?

Web safety matters. XSS is like sneaky bad notes, while CSRF tricks sites as if it's you. Both misuse website trust. We'll explore how they work and how to protect sites, including using CSRF tokens. Learn about online security with us!

Swan Beaujard

Swan Beaujard

8 min read

Find your way in GraphQL applications - Paths explained

Find your way in GraphQL applications - Paths explained

One GraphQL benefit over REST is that you can define a generic backend to serve applications. GraphQL defines its data schema, explicitly providing which object lives in the current application and operations to query these objects. Introduction Let's start with an example schema. type User { name: String! organization: String! } type Query { getUser(name: String!): User } // Query getUser -> User Here, we created a User data structure and made it accessible through the query g

Swan Beaujard

Swan Beaujard

3 min read

Escape Blog Squad