Join us at Boston API Security Summit 2025!
Join us at Boston API Security Summit 2025!
Join us at Boston API Security Summit 2025!
Join us at Boston API Security Summit 2025!
Join us at Boston API Security Summit 2025!
Join us at Boston API Security Summit 2025!
Close
Privacy settings
We use cookies and similar technologies that are necessary to run the website. Additional cookies are only used with your consent. You can consent to our use of cookies by clicking on Agree. For more information on which data is collected and how it is shared with our partners please read our privacy and cookie policy: Cookie policy, Privacy policy
We use cookies to access, analyse and store information such as the characteristics of your device as well as certain personal data (IP addresses, navigation usage, geolocation data or unique identifiers). The processing of your data serves various purposes: Analytics cookies allow us to analyse our performance to offer you a better online experience and evaluate the efficiency of our campaigns. Personalisation cookies give you access to a customised experience of our website with usage-based offers and support. Finally, Advertising cookies are placed by third-party companies processing your data to create audiences lists to deliver targeted ads on social media and the internet. You may freely give, refuse or withdraw your consent at any time using the link provided at the bottom of each page.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

OWASP Top 10

APIs in an AI World: The Security Blind Spot Business Leaders Must Address
APIs in an AI World: The Security Blind Spot Business Leaders Must Address

In this session, business leaders will get a clear view of what is at stake and what it means for how you govern, protect, and lead.

Register Now

APIs Are Critical Infrastructure. Why Aren’t We Treating Them That Way?
APIs Are Critical Infrastructure. Why Aren’t We Treating Them That Way?

In this session, we will take an in-depth look at what it truly means to treat APIs as critical infrastructure.

Register Now

All
API Security
OWASP API Security Top 10
OWASP Top 10
WAF
API Attacks
Vulnerabilities
Pentest
DevSecOps
Stepan Ilyin
|
Apr 06, 2025
OWASP, API Security
A10:2021 OWASP – Server Side Request Forgery

OWASP – Server Side Request Forgery. See how attackers exploit a vulnerability in your server to execute dangerous code. Learn how to secure your app.
Stepan Ilyin
|
Mar 13, 2026
API Security, Vulnerabilities, OWASP
A08:2021 OWASP – Software and Data Integrity Failures

Understand the risks of A08 OWASP Top 10, including code tampering and injection attacks. Protect from software and data integrity failures. 🛡️
Stepan Ilyin
|
Apr 09, 2025
API Security, Vulnerabilities, OWASP
A04:2021 – Insecure Design Owasp: Know Everything

Insecure Design vulnerability is broad, explains many weaknesses as absent and unproductive control design. Learn what it means, examples, solutions. 📙
Stepan Ilyin
|
Apr 08, 2025
OWASP, API Security, WAF
A10: Insufficient logging and monitoring 2017 OWASP

👉 "Insufficient logging and monitoring" is in hard to detect but it’s also hard to protect from. There are several ways we can protect ourselves from this vulnerability
Stepan Ilyin
|
Apr 08, 2025
OWASP, API Security, WAF
A9: Using Components with Known Vulnerabilities 2017 OWASP

Don't leave your security exposed. Learn about A9 from the 2017 OWASP Top 10 and how to prevent using components with known vulnerabilities. 🔒
Stepan Ilyin
|
Apr 08, 2025
OWASP, API Security, WAF
A8: Insecure Deserialization 2017 OWASP

👉 Insecure serialization has historically been considered a very difficult vulnerability to understand, in this article we will try to explain it to you in detail
Stepan Ilyin
|
Apr 08, 2025
OWASP, API Security, WAF
A7: Cross-Site Scripting (XSS) 2017 OWASP

We will look at what it takes to look for all kinds of XSS (Cross-Site Scripting) attacks in all sorts of contexts - how to test for cross site scripting, famous examples, types, impact.

Stepan Ilyin
|
Apr 08, 2025
OWASP, API Security, WAF
A6: Security Misconfiguration 2017 OWASP

👉 Guide to testing security misconfigurations by looking at the common properties of all the problems we can find in the descriptions and actions.
Stepan Ilyin
|
Apr 08, 2025
OWASP, API Security, WAF
A5: Broken Access Control 2017 OWASP

Broken Access control vulnerability is designed to grant or restrict rights to certain users in the application. Let us learn more about this attack, its examples, types, impact and prevention.

Stepan Ilyin
|
Apr 08, 2025
OWASP, API Security, WAF
A4: XML External Entities (XXE)

An XXE (XML External Entities) attack occurs when malicious actors send off data in one of the XML formats they have control over. Let us take a closer look at this vulnerability, its examples and prevention.
Stepan Ilyin
|
Jul 01, 2025
OWASP, API Security, WAF
A3: Sensitive Data Exposure 2017 OWASP

Understand the risks of A3 OWASP Top 10. Discover best practices for securing from Sensitive Data Exposure. Stay compliant 🛡️
Stepan Ilyin
|
Apr 10, 2025
OWASP, API Security, WAF
A2: Broken Authentication 2017 OWASP

Explore A2:Broken Authentication attack, what is its impact. When authentication problems and session management vulnerability arise, it is connected with wasp weak password policy.

Stepan Ilyin
|
Apr 10, 2025
OWASP, API Security, WAF
A1: Injection 2017 OWASP

There is a range of different sql injection attacks that can occur and we will be discussing them in this article. Explore a vulnerability such as A1:Injection

Ready to protect your APIs?

Wallarm helps you develop fast and stay secure.

Product TourGet a demo