API VAPT
Targeted vulnerability assessment and penetration testing of REST, GraphQL and gRPC API endpoints.
01 / ASSESSMENT COVERAGE
What we test.
- Authentication & authorization checks
- Rate limiting & denial of service testing
- Mass assignment & data exposure analysis
- Injection & business logic assessment
- API gateway configuration review
Standards & frameworks
Testing draws on the category's references where applicable. Assessment criteria are agreed during scoping.
- OWASP
- NIST
- PTES