Missed the MCP & AI Agent Security Conference? Watch the recordings

Find your API Security Test

Jumpstart your API Security testing with our pre-built YAML tests. A library of 100+ API Security tests and growing everyday

Search…

Lack of Resources & Rate Limiting (RL)

lack-of-resources-rate-limiting

Bypass captcha based protection by removing cookie

Attackers can circumvent captcha protection by removing cookies compromising the system's security.

lack-of-resources-rate-limiting

Bypass captcha based protection by removing cookie

Attackers can circumvent captcha protection by removing cookies compromising the system's security.

Business Logic

lack-of-resources-rate-limiting

Bypass captcha based protection by adding headers

Attackers can circumvent captcha protection by adding headers like x-forwarded-for, compromising the system's security.

Business Logic

lack-of-resources-rate-limiting

Bypass captcha based protection by adding headers

Attackers can circumvent captcha protection by adding headers like x-forwarded-for, compromising the system's security.

lack-of-resources-rate-limiting

Remove Captcha from request

Ignoring CAPTCHA validation without the field present in the backend server can result in severe damage and vulnerabilities.

lack-of-resources-rate-limiting

Remove Captcha from request

Ignoring CAPTCHA validation without the field present in the backend server can result in severe damage and vulnerabilities.

lack-of-resources-rate-limiting

Replaying request with same captcha

The server fails to enforce captcha expiration, allowing users to submit multiple requests using the same captcha value without time restrictions.

lack-of-resources-rate-limiting

Replaying request with same captcha

The server fails to enforce captcha expiration, allowing users to submit multiple requests using the same captcha value without time restrictions.

lack-of-resources-rate-limiting

Possible DOS attack by Pagination misconfiguration

Quite often, APIs do not impose any restrictions on the size or number of resources that can be requested by the user.

lack-of-resources-rate-limiting

Possible DOS attack by Pagination misconfiguration

Quite often, APIs do not impose any restrictions on the size or number of resources that can be requested by the user.

Product Updates

4 Minutes

The Current State of AI Agents Adoption in Enterprises

Agentic Security

4 Minutes

What is MCP Governance? A Guide to Govern MCPs (third-party and internal)