Search

REST

4 posts

Introducing business logic security testing for REST APIs

API Security

Introducing business logic security testing for REST APIs

After one year and a half of approaching API security through the lenses of GraphQL, we are proud to introduce full support for REST API Security Testing in Escape, in addition to GraphQL 🚀 You like us on GraphQL. You will love us on REST. It's been a ride since Escape's public release of our GraphQL security platform last September. To enrich this core capability, we have been shipping many new features since our public release: API Inventory, Posture Management, CI/CD Integrations, SSO, a

Antoine CarossioTristan Kalos

Antoine Carossio, Tristan Kalos

3 min read

CSRF vs XSS: What is the difference?

Best Practices

CSRF vs XSS: What is the difference?

Web safety matters. XSS is like sneaky bad notes, while CSRF tricks sites as if it's you. Both misuse website trust. We'll explore how they work and how to protect sites, including using CSRF tokens. Learn about online security with us!

Swan Beaujard

Swan Beaujard

8 min read

How to automate API Specifications for Continuous Security Testing (CT)

REST

How to automate API Specifications for Continuous Security Testing (CT)

While GraphQL APIs are growing in popularity due to their flexible query capabilities, REST currently remains the dominant architectural style for building web APIs. Unlike GraphQL, traditional REST technologies do not inherently provide an interactive schema that clients can use to explore the API. At Escape, we decided to use OpenAPI specifications or Postman Collections as input to a REST scanner instead of GraphQL schema. However, the following issue arises in this context: not all APIs hav

Younes Haddou

Younes Haddou

5 min read