New feature: Automated API Discovery from Source Code. Get Access

Find your API Security Test

Jumpstart your API Security testing with our pre-built YAML tests. A library of 100+ API Security tests and growing everyday

Search…

Lack of Resources & Rate Limiting (RL)

lack-of-resources-rate-limiting

Bypass captcha based protection by removing cookie

Attackers can circumvent captcha protection by removing cookies compromising the system's security.

Business Logic

lack-of-resources-rate-limiting

Bypass captcha based protection by adding headers

Attackers can circumvent captcha protection by adding headers like x-forwarded-for, compromising the system's security.

lack-of-resources-rate-limiting

Remove Captcha from request

Ignoring CAPTCHA validation without the field present in the backend server can result in severe damage and vulnerabilities.

lack-of-resources-rate-limiting

Replaying request with same captcha

The server fails to enforce captcha expiration, allowing users to submit multiple requests using the same captcha value without time restrictions.

lack-of-resources-rate-limiting

Possible DOS attack by Pagination misconfiguration

Quite often, APIs do not impose any restrictions on the size or number of resources that can be requested by the user.

API Security

10 minutes

PCI DSS Guidelines

Product updates

5 mins

Akto Introduces New Usage-Based Flexible Pricing Model