With the rise in popularity of microservices and more organizations moving towards API-focused architectures, understanding common vulnerability classes for APIs is becoming increasingly important. Identifying these weaknesses in our existing environment and knowing what design and build decisions caused them to happen can help us make more secure APIs.

In this course, we will introduce different ways to apply security concepts and controls to how you build and manage your APIs. We will also take you through common security vulnerability classes that affect APIs and how to identify and avoid them.

It can be helpful to finish the Finding and Fixing Web Application Vulnerabilities course beforehand as some overlapping vulnerability classes affect both, and we won’t revisit any previous context we already covered. In addition, while not required, the Designing Secure Microservice Architectures course is very complimentary as well, helping you layer your API security framework from design through to testing.