API Security Program Leadership — The API Security Loop

A senior-level course that runs an organization-wide API security program, not a single API review, by working the API Security Loop - eight arcs from Inventory through Monitor - to find every API, set the standards they are built on, verify who is calling and what they may touch, enforce the contract, funnel every call through one gateway, stop abuse, prove defenses hold before release, and watch live traffic for what only production reveals, grounded throughout in the OWASP API Security Top 10.

What you'll learn

• Build and maintain a true, program-wide API inventory, and close shadow and zombie API exposure.
• Publish and enforce org-wide API governance - a standard, a review gate, data classification, and ownership.
• Get authentication and authorization right at the object and function level, closing BOLA and BFLA.
• Enforce the API contract, centralize gateway policy, and unify abuse control, testing, and monitoring into one continuous program.

Sign in to enrol — you can pay by bKash or Nagad, or apply a promo code.