Releases of May 2023

Version 2.85 (Released on May 14, 2023)

NEW

Identifying and monitoring Shadow APIs - Shadow APIs refer to undocumented APIs found in code that can pose a significant security risk if left unmonitored. Identifying Shadow APIs is crucial to ensure that all APIs are protected, not just the ones that are known and documented. This is where our solution comes in as a key differentiator in the industry. We specialize in finding Shadow APIs to ensure that they are properly secured and protected from potential vulnerabilities.

Without proper identification and monitoring of Shadow APIs, any shift-right solution that only focuses on known APIs is ineffective. That's why we prioritize discovering and securing these hidden APIs, so that our customers can have complete protection and peace of mind.

For more information, refer to this help topic.

NEW

API Inventory - API Security is now able to scan Swagger files to identify all APIs available within an organization. This is a critical step in understanding the scope of APIs that exist in a system and identifying any potential security vulnerabilities.

With an accurate and up-to-date API inventory, organizations can effectively manage their APIs and ensure they are properly secured. Additionally, an API inventory helps in identifying potential duplication or overlap of APIs, which can be optimized to improve efficiency and reduce maintenance costs. It is an essential tool for API governance and can be used to track changes and updates to APIs over time.

For more information, see here.

NEW

API documentation risks can be a serious concern for developers and organizations alike. One way to address this issue is by proactively scanning Swagger files to identify vulnerabilities and risks at an early stage, before they can cause significant problems. This can help ensure that the API documentation accurately reflects the intended functionality and reduces the likelihood of errors or misunderstandings down the line.

In addition to improving the accuracy and completeness of the documentation, scanning Swagger files for potential risks can also improve the overall security of the API and prevent or mitigate potential security breaches.

Refer to this page for more details.

NEW

Identifying sensitive data discrepancies - API Security is now able to identify any discrepancies between the sensitive data parameters in code and those in the Swagger API documentation. This helps users discover any sensitive parameters they may not have been aware of before, allowing them to take action to fix and update their Swagger files. This ensures that the API documentation accurately reflects the current state of the codebase, reducing the risk of data breaches and other security incidents.

For more information, see this page.

NEW

Support for Flask Python queries - The incorporation of Flask Python queries into our API security scanning enables thorough analysis and identification of potential vulnerabilities within Python-based applications. With this expanded support, our customers can confidently ensure the integrity and resilience of their applications, safeguarding them against potential security risks.