api-security

What it does: - Tests web service connections for security problems - Checks if authentication systems like passwords and tokens work correctly - Verifies that users can only access data they are allowed to see - Tests if rate limits stop attackers from making too many requests - Analyzes GraphQL and REST web services for weaknesses - Tests WebSocket connections for security issues - Checks for injection attacks and data leaks When to use it: - You have permission to test a company's web service or API - You need to find if users can access other users' data - You want to check if an API properly limits how many requests someone can make - You need to test if a web service properly checks user permissions - You are auditing a GraphQL or REST API for security problems - You need to verify that authentication tokens cannot be forged or stolen