Case Study
Sungage Financial chose Escape's API security solution to secure their new GraphQL APIs. Escape’s easy setup, actionable remediation, and GraphQL support enabled comprehensive risk evaluation and swift vulnerability fixes, enhancing security and efficiency.
Webinar
Are you a security leader struggling to connect meaningfully with your developers? Join our guest expert, Dustin Lehr, to learn how to earn developers' respect, introduce gamification, and get issues fixed.
Podcast
This blog is based on the podcast episode with Max Imbiel, CISO at Bitpanda. It covers the unique challenges of building secure financial applications.
Product updates
We are excited to announce updates to our vulnerability prioritization funnel, which will help you focus on vulnerabilities that pose a real danger to your business.
GraphQL Security
GraphQL APIs, while offering robust features and flexibility, present unique security challenges compared to traditional REST APIs. This article delves into the complexities of securing GraphQL APIs, highlighting common vulnerabilities and providing a comprehensive guide to best practices for building secure GraphQL apps. A visual learner? Check out our latest webinar on GraphQL security: Why Securing GraphQL is Challenging Complex query capabilities GraphQL APIs allow for complex querie
API Security
“DAST is dead” - that’s the phrase that appears every year on social media and in cybersecurity newsletters. But what if in 2024, it finally came true? DAST, Dynamic Application Security Testing (even though we see a new terminology “Dynamic API Security Testing” popping up here and there within the last weeks), has been a cornerstone of application security testing in the last decade but it’s time to make way for the next generation of application security testing - Business Logic Security Tes
Product updates
We are excited to announce the updates to our DAST scanner, helping you achieve improved performance and obtain better results when testing your APIs.
API Inventory
With our updates to API discovery and inventory, you gain even more capabilities to easily achieve complete governance.
![[Webinar] How to secure GraphQL](/blog/content/images/size/w600/format/webp/2024/04/How-to-secure-GraphQL-webinar-2.png)
API Security
Join Uri Goldshtein and Tristan Kalos for a webinar on GraphQL security and learn to secure your GraphQL APIs.
Custom Security Tests
Welcome to the Elephant in AppSec, the podcast to explore, challenge, and boldly face the AppSec Elephants in the room. In this article, we'll cover the main takeaways from our conversation with Keshav Malik, a senior Product Security Engineer at LinkedIn. Our goal is to help you understand how to better write your custom security tests. Dive right in! Keshav's background Keshav is a Senior Product Security Engineer at LinkedIn. With experience in information security and a passion for autom
Application Security
This article is based on the Elephant in AppSec podcast episode with Mihir Shah, a Senior Staff Application Security Engineer at ForgeRock, and the author of the Cloud Native Software Security Handbook.
API Discovery
Learn more about the concept of API sprawl, its implications, and the challenges and importance of API governance.
![[Fireside Chat] API sprawl: Understanding the growing challenge of 2024 and how to navigate it](/blog/content/images/size/w600/format/webp/2024/03/api-sprawl-how-to-navigate-it--1-.png)
API Security
Hey there 👋 Join Bill Doerrfeld, tech journalist and Editor-in-Chief at the Nordic APIs blog, Erik Wilde, OAI Ambassador at the OpenAPI Initiative, and Antoine Carossio, CTO and co-founder at Escape, for a fireside chat on the challenges of API sprawl. Sign me up! During this live discussion, they will explore: * The key factors contributing to API sprawl * Examine its causes * Discuss its implications for organizations, security engineers, and developers * Share insights on ways to pre
API Security
Organizations are constantly seeking ways to improve their defenses against business logic vulnerabilities. These vulnerabilities, often difficult to detect, can lead to significant security breaches if left unchecked. To address this challenge, we've introduced a new feature within our platform that empowers teams to create custom business logic tests for APIs, enabling the identification and remediation of security flaws at scale. To explain how to get started with custom security tests, we h
API Security
In the last decade, security scanners have evolved to identify common vulnerabilities like SQL injections. But that’s just not enough anymore. In 2024, data leaks in applications come from exploiting business logic flaws. In the next few years, applications will grow in size and number too fast, so the true advantage will come from being able to find business logic vulnerabilities at scale. The growing diversity of security tools changed the way we secured our applications in recent years. Th
Podcast
Welcome to the Elephant in AppSec, the podcast to explore, challenge, and boldly face the AppSec Elephants in the room. Today we’re excited to have an amazing guest, Jacob Salassi, join us. You can find the main takeaways from our conversation with Jacob just down below! Jacob's background Jacob is the Director of Product Security and Regulatory Expansion at Snowflake, where he has played a pivotal role in guiding the company through its pre- and post-IPO phases. With over 15 years of exper
Product updates
Today, we’re launching customization improvements to Escape’s automated testing capabilities. With Escape Rules, you can now write custom security tests that do not require any maintenance and adapt to each newly discovered API and each new version of your existing APIs. 💡Want to learn how to write custom security tests for your APIs? Sign up for our upcoming workshop. What is an Escape Rule? Escape Rule is a custom security test that can be created to address unique security concerns or sc
Application Security
If you're a security engineer, the chances that you've struggled with your development team to implement secure coding practices are high. If you don't have the right culture in your organization, it might be even harder. Developers consider you as an adversary, rather than an ally that's here to help them. It feels like an uphill battle day in, day out. We had great training at Segment, where we had two parts where every single new engineer had to go through it. We had to think like an attacke
API Security
Do you fully grasp the magnitude of sensitive data exposure? It stands as one of the most prevalent and menacing threats to organizational security in 2025. Picture any information quintessential to an individual's or a company's identity and safety - personal, financial, health, or trade secrets. When such critical data sees the light of day in places it shouldn't, the dominoes start to fall: identity theft, scams, legal battles, tarnished reputations, and steep regulatory penalties. You don't
API Security
Learn about the dangers of API secret key exposure and discover our selection of prevention strategies.
API Discovery
API Sprawl is a serious challenge in 2024, and shadow APIs are part of the problem. But do you actually know what Shadow APIs are and why they represent danger for organizations? With the ever-increasing number of exposed APIs, the pain of not being able to gain visibility over all of them is creeping up on security engineers. Unfortunately, it's all too common to have APIs in staging and production that no one on your development or security teams remembers or knows about. And if you don't kno
Podcast
Welcome to the Elephant in AppSec, the podcast to explore, challenge, and boldly face the AppSec Elephants in the room. Today, we’re excited to have an amazing guest, Laura Bell Main, join us. With over 20 years in software development and application security, Laura is the co-founder and CEO of SafeStack, an online education platform that offers secure development training for fast-moving companies. Laura is also a well-known keynote speaker and has spoken at high-profile events like BlackHa
API Discovery
Discover the impact of API sprawl in 2024 and learn how to effectively navigate it with expert insights from our team.
Podcast
Today, we're joined by Anmol Agarwal, a security researcher at Nokia. Tune in as we challenge her insights on adversarial machine learning.
