Join Webinar on Industry’s First MCP Security Solution. Save Your Spot

Join Webinar on Industry’s First MCP Security Solution. Save Your Spot

Join Webinar on Industry’s First MCP Security Solution. Save Your Spot

Find your API Security Test

Jumpstart your API Security testing with our pre-built YAML tests. A library of 100+ API Security tests and growing everyday

Search…

Search…

Search…

Lack of Resources & Rate Limiting (RL)

Clear filter

lack-of-resources-rate-limiting

Bypass captcha based protection by removing cookie

Attackers can circumvent captcha protection by removing cookies compromising the system's security.

lack-of-resources-rate-limiting

Bypass captcha based protection by removing cookie

Attackers can circumvent captcha protection by removing cookies compromising the system's security.

Business Logic

lack-of-resources-rate-limiting

Bypass captcha based protection by adding headers

Attackers can circumvent captcha protection by adding headers like x-forwarded-for, compromising the system's security.

Business Logic

lack-of-resources-rate-limiting

Bypass captcha based protection by adding headers

Attackers can circumvent captcha protection by adding headers like x-forwarded-for, compromising the system's security.

lack-of-resources-rate-limiting

Remove Captcha from request

Ignoring CAPTCHA validation without the field present in the backend server can result in severe damage and vulnerabilities.

lack-of-resources-rate-limiting

Remove Captcha from request

Ignoring CAPTCHA validation without the field present in the backend server can result in severe damage and vulnerabilities.

lack-of-resources-rate-limiting

Replaying request with same captcha

The server fails to enforce captcha expiration, allowing users to submit multiple requests using the same captcha value without time restrictions.

lack-of-resources-rate-limiting

Replaying request with same captcha

The server fails to enforce captcha expiration, allowing users to submit multiple requests using the same captcha value without time restrictions.

lack-of-resources-rate-limiting

Possible DOS attack by Pagination misconfiguration

Quite often, APIs do not impose any restrictions on the size or number of resources that can be requested by the user.

lack-of-resources-rate-limiting

Possible DOS attack by Pagination misconfiguration

Quite often, APIs do not impose any restrictions on the size or number of resources that can be requested by the user.

Read our blog

NIST Cybersecurity Framework
NIST Cybersecurity Framework
NIST Cybersecurity Framework

API Security

8 minutes

NIST Cybersecurity Framework

API Security Audit
API Security Audit
API Security Audit

API Security

7 minutes

API Security Audit