Escape - The API Security Blog

<!DOCTYPE html> <html lang="en"> <head> <title>Escape - The API Security Blog</title> <meta charset="utf-8" /> <meta http-equiv="X-UA-Compatible" content="IE=edge" /> <meta name="HandheldFriendly" content="True" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <style> :root { --button-bg-color: #ffffff; --button-text-color: var(--color-darkgrey); } </style> <link rel="preconnect" href="https://fonts.googleapis.com"> <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin> <link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,400;0,500;0,600;0,700;1,400;1,700&family=Inter:wght@400;500;600;700&display=swap"> <link rel="stylesheet" type="text/css" href="/blog/assets/built/screen.css?v=bdd0505571" /> <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.28.0/themes/prism-tomorrow.min.css" integrity="sha512-vswe+cgvic/XBoF1OcM/TeJ2FW0OofqAVdCZiEYkd6dwGXthvkSFWOoGGJgS2CW70VK5dQM5Oh+7ne47s74VTg==" crossorigin="anonymous" referrerpolicy="no-referrer" /> <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/tocbot/4.12.3/tocbot.css"> <meta name="description" content="Learn about GraphQL security, API security, performance, testing, and building production-ready APIs with the ecosystem's latest tools and best practices."> <link rel="icon" href="https://escape.tech/blog/content/images/size/w256h256/2021/09/ESCAPE-LOGO-28-07-2021-08_1000.png" type="image/png"> <link rel="canonical" href="https://escape.tech/blog/"> <meta name="referrer" content="no-referrer-when-downgrade"> <link rel="next" href="https://escape.tech/blog/page/2/"> <meta property="og:site_name" content="Escape - The API Security Blog"> <meta property="og:type" content="website"> <meta property="og:title" content="Escape - The API Security Blog"> <meta property="og:description" content="Learn about GraphQL security, API security, performance, testing, and building production-ready APIs with the ecosystem's latest tools and best practices."> <meta property="og:url" content="https://escape.tech/blog/"> <meta property="og:image" content="https://escape.tech/blog/content/images/2022/01/ESCAPE-LOGO-28-07-2021-02-copy-2.png"> <meta name="twitter:card" content="summary_large_image"> <meta name="twitter:title" content="Escape - The API Security Blog"> <meta name="twitter:description" content="Never worry about API Security again."> <meta name="twitter:url" content="https://escape.tech/blog/"> <meta name="twitter:image" content="https://escape.tech/blog/content/images/2022/01/ESCAPE-LOGO-28-07-2021-02-copy-2.png"> <meta name="twitter:site" content="@EscapeTechHQ"> <meta property="og:image:width" content="1200"> <meta property="og:image:height" content="437"> <script type="application/ld+json"> { "@context": "https://schema.org", "@type": "WebSite", "publisher": { "@type": "Organization", "name": "Escape - The API Security Blog", "url": "https://escape.tech/blog/", "logo": { "@type": "ImageObject", "url": "https://escape.tech/blog/content/images/2022/05/escape-logo.0e6d59f.svg", "width": 141, "height": 36 } }, "url": "https://escape.tech/blog/", "name": "Escape - The API Security Blog", "image": { "@type": "ImageObject", "url": "https://escape.tech/blog/content/images/2022/01/ESCAPE-LOGO-28-07-2021-02-copy-2.png", "width": 1200, "height": 437 }, "mainEntityOfPage": "https://escape.tech/blog/", "description": "Learn about GraphQL security, API security, performance, testing, and building production-ready APIs with the ecosystem's latest tools and best practices." } </script> <meta name="generator" content="Ghost 5.109"> <link rel="alternate" type="application/rss+xml" title="Escape - The API Security Blog" href="https://escape.tech/blog/rss/"> <script defer src="https://cdn.jsdelivr.net/ghost/portal@~2.49/umd/portal.min.js" data-i18n="true" data-ghost="https://escape.tech/blog/" data-key="0e4cafc1e55c09b1ec7809b460" data-api="https://escape.tech/blog/ghost/api/content/" data-locale="en" crossorigin="anonymous"></script><style id="gh-members-styles">.gh-post-upgrade-cta-content, .gh-post-upgrade-cta { display: flex; flex-direction: column; align-items: center; font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen, Ubuntu, Cantarell, 'Open Sans', 'Helvetica Neue', sans-serif; text-align: center; width: 100%; color: #ffffff; font-size: 16px; } .gh-post-upgrade-cta-content { border-radius: 8px; padding: 40px 4vw; } .gh-post-upgrade-cta h2 { color: #ffffff; font-size: 28px; letter-spacing: -0.2px; margin: 0; padding: 0; } .gh-post-upgrade-cta p { margin: 20px 0 0; padding: 0; } .gh-post-upgrade-cta small { font-size: 16px; letter-spacing: -0.2px; } .gh-post-upgrade-cta a { color: #ffffff; cursor: pointer; font-weight: 500; box-shadow: none; text-decoration: underline; } .gh-post-upgrade-cta a:hover { color: #ffffff; opacity: 0.8; box-shadow: none; text-decoration: underline; } .gh-post-upgrade-cta a.gh-btn { display: block; background: #ffffff; text-decoration: none; margin: 28px 0 0; padding: 8px 18px; border-radius: 4px; font-size: 16px; font-weight: 600; } .gh-post-upgrade-cta a.gh-btn:hover { opacity: 0.92; }</style> <script defer src="https://cdn.jsdelivr.net/ghost/sodo-search@~1.5/umd/sodo-search.min.js" data-key="0e4cafc1e55c09b1ec7809b460" data-styles="https://cdn.jsdelivr.net/ghost/sodo-search@~1.5/umd/main.css" data-sodo-search="https://escape.tech/blog/" data-locale="en" crossorigin="anonymous"></script> <script defer src="https://cdn.jsdelivr.net/ghost/announcement-bar@~1.1/umd/announcement-bar.min.js" data-announcement-bar="https://escape.tech/blog/" data-api-url="https://escape.tech/blog/members/api/announcement/" crossorigin="anonymous"></script> <link href="https://escape.tech/blog/webmentions/receive/" rel="webmention"> <script defer src="/blog/public/cards.min.js?v=bdd0505571"></script> <link rel="stylesheet" type="text/css" href="/blog/public/cards.min.css?v=bdd0505571"> <script defer src="/blog/public/member-attribution.min.js?v=bdd0505571"></script><style>:root {--ghost-accent-color: #09134b;}</style> <script id="userled-sdk-snippet"> window.userledSettings={app_id:"21ef73bb-cd0a-4f2b-a193-fa051a5974a1"},window.userledSnippetTs=(new Date).getTime(),(function(){if(!window.Userled){window.Userled=function(){return e.call(arguments)};var e=window.Userled;e.call=function(n){return new Promise((function(i,d){e.queue.push([].concat.apply([i,d],n))}))},e.queue=[],e.snippetVersion="4.0.0",window.Userled("page")}})(); </script> <script id="userled-sdk" type="module" src="https://sdk.userledclient.io?appId=21ef73bb-cd0a-4f2b-a193-fa051a5974a1&snippetVersion=4.0.0" data-cfasync="false"></script>  <script async src="https://www.googletagmanager.com/gtag/js?id=UA-234004425-1"></script> <script> window.dataLayer = window.dataLayer || []; function gtag() { dataLayer.push(arguments); } gtag('js', new Date()); gtag('config', 'UA-234004425-1'); </script>  <script async src="https://www.googletagmanager.com/gtag/js?id=G-0KYN4GPPPE"></script> <script> window.dataLayer = window.dataLayer || []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'G-0KYN4GPPPE'); </script> <script> var gh_white_logo = 'https://escape.tech/assets/escape-logo.png'; </script>  <script async src="https://www.googletagmanager.com/gtag/js?id=G-5FTS8Y5Z4N"></script> <script> window.dataLayer = window.dataLayer || []; function gtag() { dataLayer.push(arguments); } gtag('js', new Date()); gtag('config', 'G-5FTS8Y5Z4N'); </script> <script> (function (w, d, s, l, i) { w[l] = w[l] || []; w[l].push({ 'gtm.start': new Date().getTime(), event: 'gtm.js' }); var f = d.getElementsByTagName(s)[0], j = d.createElement(s), dl = l != 'dataLayer' ? '&l=' + l : ''; j.async = true; j.src = 'https://www.googletagmanager.com/gtm.js?id=' + i + dl; f.parentNode.insertBefore(j, f); })(window, document, 'script', 'dataLayer', 'GTM-MDMBJH6V'); </script>   <script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start': new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0], j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src= 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f); })(window,document,'script','data layer,'GTM-MLMM8LHP');</script>  <script> var gh_white_logo = 'https://escape.tech/assets/escape-logo.png'; </script>  <script src="https://cdn.usefathom.com/script.js" data-site="WIHBBNEH" defer></script>   <script type="application/ld+json"> { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [{ "@type": "ListItem", "position": 1, "name": "Home", "item": "https://escape.tech/" },{ "@type": "ListItem", "position": 2, "name": "Blog", "item": "https://escape.tech/blog" }] } </script>  <style> .container.large { max-width: calc(750px + 8vw); } </style> <script> var gh_white_logo = "https://i.ibb.co/cx8zN47/ESCAPE-LOGO-28-07-2021-02.png" </script>  <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.25.0/themes/prism.min.css" integrity="sha512-tN7Ec6zAFaVSG3TpNAKtk4DOHNpSwKHxxrsiw4GHKESGPs5njn/0sMCUMl2svV4wo4BK/rCP7juYz+zx+l6oeQ==" crossorigin="anonymous" referrerpolicy="no-referrer" /> <style> .gh-head { position: -webkit-sticky; /* Older Safari browsers */ position: sticky; /* Most other modern browsers including Safari */ top: 0; z-index: 4000; } /* Shine Case study style */ #strongshine-chose-escape-to-enhance-its-application-security-achieve-a-thorough-inventory-of-their-apis-and-help-developers-fix-issues-quicklystrong, #within-a-week-shine-covered-four-applications-accounting-for-300-endpoints-this-rapid-coverage-led-to-the-discovery-and-fixing-of-at-least-strong2-critical-vulnerabilities-in-less-than-24-hours-post-discoverystrong { width: 65%; font-size: 30px; color: #01e2b7; } @media (max-width: 640px) { #strongshine-chose-escape-to-enhance-its-application-security-achieve-a-thorough-inventory-of-their-apis-and-help-developers-fix-issues-quicklystrong, #within-a-week-shine-covered-four-applications-accounting-for-300-endpoints-this-rapid-coverage-led-to-the-discovery-and-fixing-of-at-least-strong2-critical-vulnerabilities-in-less-than-24-hours-post-discoverystrong { width: 90%; font-size: 1.2em; } } #strongstart-securing-your-apis-for-freestrong { margin-bottom: 0.5em; } .kg-header-card a.kg-header-card-button { display: inline-block !important; padding: 20px 16.5px !important; font-size: 1.4rem !important; font-size: 20px !important; line-height: 0.325em !important; color: #1a1b3d !important; background-color: #05e2b7 !important; border-radius: 6px !important; } </style> </head> <body class="home-template has-sans-body"> <div class="viewport"> <header id="gh-head" class="gh-head"> <nav class="gh-head-inner inner gh-container"> <div class="gh-head-brand"> <a class="gh-head-logo" href="https://escape.tech/blog"> <img width="140" src="https://escape.tech/blog/content/images/2022/05/escape-logo.0e6d59f.svg" alt="Escape - The API Security Blog" /> </a> <div class="mobile-cta-container"> <a style="border-radius: 100px; background-color: #05e2b7; color: #1a1b3d; margin-right: 0; font-weight: 700; font-size: 1.4rem; padding: 12px 18px 13px;" href="https://calendly.com/d/46g-xzy-dgw?utm_source=navbar&utm_medium=blog">Get a demo</a> </div> <a class="gh-burger" role="button"> <div class="gh-burger-box"> <div class="gh-burger-inner"></div> </div> </a> </div> <div class="gh-head-menu"> <ul class="nav"> <li class="nav-escape-platform"><a href="https://escape.tech">Escape Platform</a></li> <li class="nav-case-studies"><a href="https://escape.tech/blog/tag/case-study/">Case studies</a></li> <li class="nav-best-practices"><a href="https://escape.tech/blog/tag/best-practices/">Best Practices</a></li> <li class="nav-events"><a href="https://escape.tech/blog/tag/events/">Events</a></li> <li class="nav-community"><a href="https://join.slack.com/t/escapecommunity/shared_invite/zt-2cpklvqqv-m_h4fzlZhSatxcrxetf3Fg">Community</a></li> </ul> <div class="gh-head-actions"> <a class="try-for-free-button" href="https://calendly.com/d/46g-xzy-dgw?utm_source=navbar&utm_medium=blog">Get a demo</a> <button class="gh-search-icon" aria-label="search" data-ghost-search style="display: inline-flex; justify-content: center; align-items: center; width: 32px; height: 32px; border: 0; color: inherit; background-color: transparent; cursor: pointer; outline: none; margin-left: 4px;"> <svg width="20" height="20" fill="none" viewBox="0 0 24 24"><path d="M14.949 14.949a1 1 0 0 1 1.414 0l6.344 6.344a1 1 0 0 1-1.414 1.414l-6.344-6.344a1 1 0 0 1 0-1.414Z" fill="currentColor"/><path d="M10 3a7 7 0 1 0 0 14 7 7 0 0 0 0-14Zm-9 7a9 9 0 1 1 18 0 9 9 0 0 1-18 0Z" fill="currentColor"/></svg> </button> </div> </div> </nav> </header> <div class="site-content"> <div class="site-header-content"> <div class="site-header-grid" style="max-width: 1200px;display: grid;margin: auto;text-align: left;"> <div class="site-header-text"> <h1 class="site-title"> Escape - The API Security Blog </h1> <p>Dive into the world of application security, API security and GraphQL security. Explore performance optimization, testing strategies, and best practices for building secure APIs & SPA. </p> </div> </div> </div> <main id="site-main" class="site-main outer"> <div class="inner posts"> <div class="tag-list" > <div class="tag-list-item"> <a href="/blog/tag/application-security/">Application Security</a> </div> <div class="tag-list-item"> <a href="/blog/tag/api-security/">API Security</a> </div> <div class="tag-list-item"> <a href="/blog/tag/graphql/">GraphQL</a> </div> <div class="tag-list-item"> <a href="/blog/tag/the-elephant-in-appsec/">The Elephant in AppSec</a> </div> <div class="tag-list-item"> <a href="/blog/tag/product-updates/">Product updates</a> </div> <div class="tag-list-item"> <a href="/blog/tag/podcast/">Podcast</a> </div> <div class="tag-list-item"> <a href="/blog/tag/graphql-vulnerability/">GraphQL Vulnerability</a> </div> <div class="tag-list-item"> <a href="/blog/tag/announcement/">Announcement</a> </div> <div class="tag-list-item"> <a href="/blog/tag/competitor-comparison/">Competitor Comparison</a> </div> <div class="tag-list-item"> <a href="/blog/tag/best-practices/">Best Practices</a> </div> </div> <div class="post-feed"> <article class="post-card post tag-webinar-recap tag-webinar tag-enterprise post-card-large"> <a class="post-card-image-link" href="/blog/webinar-recap-the-security-mistakes-everyone-makes-in-m-a/"> <img class="post-card-image" srcset="/blog/content/images/size/w300/2025/02/Webinar---Panels---1--min.png 300w, /blog/content/images/size/w600/2025/02/Webinar---Panels---1--min.png 600w, /blog/content/images/size/w1000/2025/02/Webinar---Panels---1--min.png 1000w, /blog/content/images/size/w2000/2025/02/Webinar---Panels---1--min.png 2000w" sizes="(max-width: 1000px) 400px, 800px" src="/blog/content/images/size/w600/2025/02/Webinar---Panels---1--min.png" alt="Webinar recap: The security mistakes everyone makes in M&A" loading="lazy" /> </a> <div class="post-card-content"> <a class="post-card-content-link" href="/blog/webinar-recap-the-security-mistakes-everyone-makes-in-m-a/"> <header class="post-card-header"> <div class="post-card-primary-tag">Webinar recap</div> <h2 class="post-card-title">Webinar recap: The security mistakes everyone makes in M&A</h2> </header> <div class="post-card-excerpt"> <p>Discover exactly how to avoid the common security pitfalls during M&A from our panel of experts, who are drawing from decades of experience in the field.</p> </div> </a> <footer class="post-card-meta"> <ul class="author-list"> <li class="author-list-item"> <a href="/blog/author/sanjana/" class="static-avatar"> <img class="author-profile-image" src="/blog/content/images/size/w100/2024/11/me.jpeg" alt="Sanjana Iyer" loading="lazy" /> </a> </li> </ul> <div class="post-card-byline-content"> <span class="post-card-byline-author"><a href="/blog/author/sanjana/">Sanjana Iyer</a></span> <span class="post-card-byline-date"><time datetime="2025-02-12">Feb 12, 2025</time> <span class="bull">•</span> 10 min read</span> </div> </footer> </div> </article> <article class="post-card post tag-competitor-comparison "> <a class="post-card-image-link" href="/blog/bright-security-vs-escape/"> <img class="post-card-image" srcset="/blog/content/images/size/w300/2025/02/Escape-vs-Bright-Security.png 300w, /blog/content/images/size/w600/2025/02/Escape-vs-Bright-Security.png 600w, /blog/content/images/size/w1000/2025/02/Escape-vs-Bright-Security.png 1000w, /blog/content/images/size/w2000/2025/02/Escape-vs-Bright-Security.png 2000w" sizes="(max-width: 1000px) 400px, 800px" src="/blog/content/images/size/w600/2025/02/Escape-vs-Bright-Security.png" alt="Bright Security vs Escape" loading="lazy" /> </a> <div class="post-card-content"> <a class="post-card-content-link" href="/blog/bright-security-vs-escape/"> <header class="post-card-header"> <div class="post-card-primary-tag">Competitor Comparison</div> <h2 class="post-card-title">Bright Security vs Escape</h2> </header> <div class="post-card-excerpt"> <p>Explore how Bright Security differs from Escape, weigh the advantages and disadvantages of both, and determine the best fit for your company.</p> </div> </a> <footer class="post-card-meta"> <ul class="author-list"> <li class="author-list-item"> <a href="/blog/author/alexandra/" class="static-avatar"> <img class="author-profile-image" src="/blog/content/images/size/w100/2023/09/profile.jpeg" alt="Alexandra Charikova" loading="lazy" /> </a> </li> </ul> <div class="post-card-byline-content"> <span class="post-card-byline-author"><a href="/blog/author/alexandra/">Alexandra Charikova</a></span> <span class="post-card-byline-date"><time datetime="2025-02-07">Feb 7, 2025</time> <span class="bull">•</span> 9 min read</span> </div> </footer> </div> </article> <article class="post-card post tag-webinar-recap tag-webinar "> <a class="post-card-image-link" href="/blog/webinar-recap-sast-and-dast/"> <img class="post-card-image" srcset="/blog/content/images/size/w300/2025/01/SAST-and-DAST-webinar--2-.png 300w, /blog/content/images/size/w600/2025/01/SAST-and-DAST-webinar--2-.png 600w, /blog/content/images/size/w1000/2025/01/SAST-and-DAST-webinar--2-.png 1000w, /blog/content/images/size/w2000/2025/01/SAST-and-DAST-webinar--2-.png 2000w" sizes="(max-width: 1000px) 400px, 800px" src="/blog/content/images/size/w600/2025/01/SAST-and-DAST-webinar--2-.png" alt="Webinar recap: How to combine SAST and DAST for complete application coverage" loading="lazy" /> </a> <div class="post-card-content"> <a class="post-card-content-link" href="/blog/webinar-recap-sast-and-dast/"> <header class="post-card-header"> <div class="post-card-primary-tag">Webinar recap</div> <h2 class="post-card-title">Webinar recap: How to combine SAST and DAST for complete application coverage</h2> </header> <div class="post-card-excerpt"> <p>Modern applications come with a whole host of challenges that legacy SASTs and DASTs simply cannot keep up with. If you want to be sure no vulnerabilities slip through the cracks in these applications, the key is combining a modern SAST and DAST. Why? Last week, Escape鈥檚 CEO Tristan</p> </div> </a> <footer class="post-card-meta"> <ul class="author-list"> <li class="author-list-item"> <a href="/blog/author/sanjana/" class="static-avatar"> <img class="author-profile-image" src="/blog/content/images/size/w100/2024/11/me.jpeg" alt="Sanjana Iyer" loading="lazy" /> </a> </li> </ul> <div class="post-card-byline-content"> <span class="post-card-byline-author"><a href="/blog/author/sanjana/">Sanjana Iyer</a></span> <span class="post-card-byline-date"><time datetime="2025-01-30">Jan 30, 2025</time> <span class="bull">•</span> 16 min read</span> </div> </footer> </div> </article> <article class="post-card post tag-webinar tag-events "> <a class="post-card-image-link" href="/blog/webinar-the-security-mistakes-everyone-makes-in-m-a/"> <img class="post-card-image" srcset="/blog/content/images/size/w300/2025/01/Webinar---Panels-.png 300w, /blog/content/images/size/w600/2025/01/Webinar---Panels-.png 600w, /blog/content/images/size/w1000/2025/01/Webinar---Panels-.png 1000w, /blog/content/images/size/w2000/2025/01/Webinar---Panels-.png 2000w" sizes="(max-width: 1000px) 400px, 800px" src="/blog/content/images/size/w600/2025/01/Webinar---Panels-.png" alt="Webinar: The security mistakes everyone makes in M&A" loading="lazy" /> </a> <div class="post-card-content"> <a class="post-card-content-link" href="/blog/webinar-the-security-mistakes-everyone-makes-in-m-a/"> <header class="post-card-header"> <div class="post-card-primary-tag">Webinar</div> <h2 class="post-card-title">Webinar: The security mistakes everyone makes in M&A</h2> </header> <div class="post-card-excerpt"> <p>If you often manage security across diverse brands or handle mergers and acquisitions, this webinar is not to be missed, as a panel of guest experts take you through all of the real-world security pitfalls when bringing companies together.</p> </div> </a> <footer class="post-card-meta"> <ul class="author-list"> <li class="author-list-item"> <a href="/blog/author/alexandra/" class="static-avatar"> <img class="author-profile-image" src="/blog/content/images/size/w100/2023/09/profile.jpeg" alt="Alexandra Charikova" loading="lazy" /> </a> </li> </ul> <div class="post-card-byline-content"> <span class="post-card-byline-author"><a href="/blog/author/alexandra/">Alexandra Charikova</a></span> <span class="post-card-byline-date"><time datetime="2025-01-09">Jan 9, 2025</time> <span class="bull">•</span> 2 min read</span> </div> </footer> </div> </article> <article class="post-card post tag-competitor-comparison tag-dast tag-application-security "> <a class="post-card-image-link" href="/blog/escape-vs-probely-acquired-by-snyk/"> <img class="post-card-image" srcset="/blog/content/images/size/w300/2025/01/escape-probely-snyk.png 300w, /blog/content/images/size/w600/2025/01/escape-probely-snyk.png 600w, /blog/content/images/size/w1000/2025/01/escape-probely-snyk.png 1000w, /blog/content/images/size/w2000/2025/01/escape-probely-snyk.png 2000w" sizes="(max-width: 1000px) 400px, 800px" src="/blog/content/images/size/w600/2025/01/escape-probely-snyk.png" alt="Escape vs Probely (acquired by Snyk)" loading="lazy" /> </a> <div class="post-card-content"> <a class="post-card-content-link" href="/blog/escape-vs-probely-acquired-by-snyk/"> <header class="post-card-header"> <div class="post-card-primary-tag">Competitor Comparison</div> <h2 class="post-card-title">Escape vs Probely (acquired by Snyk)</h2> </header> <div class="post-card-excerpt"> <p>Discover the differences between these tools for Application Discovery and DAST.</p> </div> </a> <footer class="post-card-meta"> <ul class="author-list"> <li class="author-list-item"> <a href="/blog/author/alexandra/" class="static-avatar"> <img class="author-profile-image" src="/blog/content/images/size/w100/2023/09/profile.jpeg" alt="Alexandra Charikova" loading="lazy" /> </a> </li> </ul> <div class="post-card-byline-content"> <span class="post-card-byline-author"><a href="/blog/author/alexandra/">Alexandra Charikova</a></span> <span class="post-card-byline-date"><time datetime="2025-01-09">Jan 9, 2025</time> <span class="bull">•</span> 5 min read</span> </div> </footer> </div> </article> <article class="post-card post tag-product-updates tag-application-security "> <a class="post-card-image-link" href="/blog/new-product-improvements-jan-2025/"> <img class="post-card-image" srcset="/blog/content/images/size/w300/2025/01/new-dast-features.png 300w, /blog/content/images/size/w600/2025/01/new-dast-features.png 600w, /blog/content/images/size/w1000/2025/01/new-dast-features.png 1000w, /blog/content/images/size/w2000/2025/01/new-dast-features.png 2000w" sizes="(max-width: 1000px) 400px, 800px" src="/blog/content/images/size/w600/2025/01/new-dast-features.png" alt="Kickstart 2025 with New DAST Scanner Features" loading="lazy" /> </a> <div class="post-card-content"> <a class="post-card-content-link" href="/blog/new-product-improvements-jan-2025/"> <header class="post-card-header"> <div class="post-card-primary-tag">Product updates</div> <h2 class="post-card-title">Kickstart 2025 with New DAST Scanner Features</h2> </header> <div class="post-card-excerpt"> <p>The start of a new year brings exciting updates to our DAST scanner! Our goal is simple: to improve testing accuracy by leveraging real, concrete examples of API requests when they might be required. While we don鈥檛 need to have direct access to live traffic to start in-depth testing,</p> </div> </a> <footer class="post-card-meta"> <ul class="author-list"> <li class="author-list-item"> <a href="/blog/author/alexandra/" class="static-avatar"> <img class="author-profile-image" src="/blog/content/images/size/w100/2023/09/profile.jpeg" alt="Alexandra Charikova" loading="lazy" /> </a> </li> </ul> <div class="post-card-byline-content"> <span class="post-card-byline-author"><a href="/blog/author/alexandra/">Alexandra Charikova</a></span> <span class="post-card-byline-date"><time datetime="2025-01-07">Jan 7, 2025</time> <span class="bull">•</span> 4 min read</span> </div> </footer> </div> </article> <article class="post-card post tag-webinar tag-application-security tag-events "> <a class="post-card-image-link" href="/blog/webinar-combine-sast-and-dast-for-complete-application-coverage/"> <img class="post-card-image" srcset="/blog/content/images/size/w300/2025/01/Templates---BLOG--3-.png 300w, /blog/content/images/size/w600/2025/01/Templates---BLOG--3-.png 600w, /blog/content/images/size/w1000/2025/01/Templates---BLOG--3-.png 1000w, /blog/content/images/size/w2000/2025/01/Templates---BLOG--3-.png 2000w" sizes="(max-width: 1000px) 400px, 800px" src="/blog/content/images/size/w600/2025/01/Templates---BLOG--3-.png" alt="Webinar cover on combining SAST and DAST for complete application security coverage" loading="lazy" /> </a> <div class="post-card-content"> <a class="post-card-content-link" href="/blog/webinar-combine-sast-and-dast-for-complete-application-coverage/"> <header class="post-card-header"> <div class="post-card-primary-tag">Webinar</div> <h2 class="post-card-title">Webinar: How to combine SAST and DAST for complete application coverage</h2> </header> <div class="post-card-excerpt"> <p>Join experts Amit Bismut and Tristan Kalos as they give you actionable insights and practical examples on how to harness SAST and DAST together to create a robust security strategy.</p> </div> </a> <footer class="post-card-meta"> <ul class="author-list"> <li class="author-list-item"> <a href="/blog/author/sanjana/" class="static-avatar"> <img class="author-profile-image" src="/blog/content/images/size/w100/2024/11/me.jpeg" alt="Sanjana Iyer" loading="lazy" /> </a> </li> </ul> <div class="post-card-byline-content"> <span class="post-card-byline-author"><a href="/blog/author/sanjana/">Sanjana Iyer</a></span> <span class="post-card-byline-date"><time datetime="2025-01-07">Jan 7, 2025</time> <span class="bull">•</span> 1 min read</span> </div> </footer> </div> </article> <article class="post-card post tag-dast tag-application-security "> <a class="post-card-image-link" href="/blog/what-is-wrong-with-the-current-state-of-dast-feedback-from-my-conversations-with-appsec-engineers/"> <img class="post-card-image" srcset="/blog/content/images/size/w300/2024/12/current-state-dast.png 300w, /blog/content/images/size/w600/2024/12/current-state-dast.png 600w, /blog/content/images/size/w1000/2024/12/current-state-dast.png 1000w, /blog/content/images/size/w2000/2024/12/current-state-dast.png 2000w" sizes="(max-width: 1000px) 400px, 800px" src="/blog/content/images/size/w600/2024/12/current-state-dast.png" alt="What is wrong with the current state of DAST? Feedback from my conversations with AppSec engineers" loading="lazy" /> </a> <div class="post-card-content"> <a class="post-card-content-link" href="/blog/what-is-wrong-with-the-current-state-of-dast-feedback-from-my-conversations-with-appsec-engineers/"> <header class="post-card-header"> <div class="post-card-primary-tag">DAST</div> <h2 class="post-card-title">What is wrong with the current state of DAST? Feedback from my conversations with AppSec engineers</h2> </header> <div class="post-card-excerpt"> <p>And a deep dive into how the state of DAST is changing.</p> </div> </a> <footer class="post-card-meta"> <ul class="author-list"> <li class="author-list-item"> <a href="/blog/author/alexandra/" class="static-avatar"> <img class="author-profile-image" src="/blog/content/images/size/w100/2023/09/profile.jpeg" alt="Alexandra Charikova" loading="lazy" /> </a> </li> </ul> <div class="post-card-byline-content"> <span class="post-card-byline-author"><a href="/blog/author/alexandra/">Alexandra Charikova</a></span> <span class="post-card-byline-date"><time datetime="2025-01-03">Jan 3, 2025</time> <span class="bull">•</span> 10 min read</span> </div> </footer> </div> </article> <article class="post-card post tag-product-updates "> <a class="post-card-image-link" href="/blog/introducing-kubernetes-integration/"> <img class="post-card-image" srcset="/blog/content/images/size/w300/2024/12/Kubernetes-Integration-cover.png 300w, /blog/content/images/size/w600/2024/12/Kubernetes-Integration-cover.png 600w, /blog/content/images/size/w1000/2024/12/Kubernetes-Integration-cover.png 1000w, /blog/content/images/size/w2000/2024/12/Kubernetes-Integration-cover.png 2000w" sizes="(max-width: 1000px) 400px, 800px" src="/blog/content/images/size/w600/2024/12/Kubernetes-Integration-cover.png" alt="Introducing Kubernetes Integration: Discover APIs in Kubernetes" loading="lazy" /> </a> <div class="post-card-content"> <a class="post-card-content-link" href="/blog/introducing-kubernetes-integration/"> <header class="post-card-header"> <div class="post-card-primary-tag">Product updates</div> <h2 class="post-card-title">Introducing Kubernetes Integration: Discover APIs in Kubernetes</h2> </header> <div class="post-card-excerpt"> <p>Identify undocumented and potentially vulnerable APIs in your Kubernetes clusters with ease.</p> </div> </a> <footer class="post-card-meta"> <ul class="author-list"> <li class="author-list-item"> <a href="/blog/author/alexandra/" class="static-avatar"> <img class="author-profile-image" src="/blog/content/images/size/w100/2023/09/profile.jpeg" alt="Alexandra Charikova" loading="lazy" /> </a> </li> </ul> <div class="post-card-byline-content"> <span class="post-card-byline-author"><a href="/blog/author/alexandra/">Alexandra Charikova</a></span> <span class="post-card-byline-date"><time datetime="2024-12-16">Dec 16, 2024</time> <span class="bull">•</span> 2 min read</span> </div> </footer> </div> </article> <article class="post-card post tag-product-updates "> <a class="post-card-image-link" href="/blog/front-end-dast-beta/"> <img class="post-card-image" srcset="/blog/content/images/size/w300/2024/12/beta-dast-webapp-spa--1-.png 300w, /blog/content/images/size/w600/2024/12/beta-dast-webapp-spa--1-.png 600w, /blog/content/images/size/w1000/2024/12/beta-dast-webapp-spa--1-.png 1000w, /blog/content/images/size/w2000/2024/12/beta-dast-webapp-spa--1-.png 2000w" sizes="(max-width: 1000px) 400px, 800px" src="/blog/content/images/size/w600/2024/12/beta-dast-webapp-spa--1-.png" alt="Escape DAST Now in Beta: SPAs Testing Made Easy" loading="lazy" /> </a> <div class="post-card-content"> <a class="post-card-content-link" href="/blog/front-end-dast-beta/"> <header class="post-card-header"> <div class="post-card-primary-tag">Product updates</div> <h2 class="post-card-title">Escape DAST Now in Beta: SPAs Testing Made Easy</h2> </header> <div class="post-card-excerpt"> <p>Escape expanded into front-end web app and single-page application (SPA) security testing. Help us build a better DAST by joining the closed beta.</p> </div> </a> <footer class="post-card-meta"> <ul class="author-list"> <li class="author-list-item"> <a href="/blog/author/alexandra/" class="static-avatar"> <img class="author-profile-image" src="/blog/content/images/size/w100/2023/09/profile.jpeg" alt="Alexandra Charikova" loading="lazy" /> </a> </li> </ul> <div class="post-card-byline-content"> <span class="post-card-byline-author"><a href="/blog/author/alexandra/">Alexandra Charikova</a></span> <span class="post-card-byline-date"><time datetime="2024-12-10">Dec 10, 2024</time> <span class="bull">•</span> 3 min read</span> </div> </footer> </div> </article> <article class="post-card post tag-dast tag-api-security tag-competitor-comparison tag-tools "> <a class="post-card-image-link" href="/blog/top-dast-tools/"> <img class="post-card-image" srcset="/blog/content/images/size/w300/2024/11/API-attack--1-.svg 300w, /blog/content/images/size/w600/2024/11/API-attack--1-.svg 600w, /blog/content/images/size/w1000/2024/11/API-attack--1-.svg 1000w, /blog/content/images/size/w2000/2024/11/API-attack--1-.svg 2000w" sizes="(max-width: 1000px) 400px, 800px" src="/blog/content/images/size/w600/2024/11/API-attack--1-.svg" alt="Top Dynamic Application Security Testing (DAST) Tools for 2025" loading="lazy" /> </a> <div class="post-card-content"> <a class="post-card-content-link" href="/blog/top-dast-tools/"> <header class="post-card-header"> <div class="post-card-primary-tag">DAST</div> <h2 class="post-card-title">Top Dynamic Application Security Testing (DAST) Tools for 2025</h2> </header> <div class="post-card-excerpt"> <p>Discover the best DAST tools to enhance application security. Learn how to identify and fix vulnerabilities, ensuring compliance and robust protection.</p> </div> </a> <footer class="post-card-meta"> <ul class="author-list"> <li class="author-list-item"> <a href="/blog/author/sanjana/" class="static-avatar"> <img class="author-profile-image" src="/blog/content/images/size/w100/2024/11/me.jpeg" alt="Sanjana Iyer" loading="lazy" /> </a> </li> <li class="author-list-item"> <a href="/blog/author/antoine/" class="static-avatar"> <img class="author-profile-image" src="/blog/content/images/size/w100/2024/08/Antoine-Escape.jpg" alt="Antoine Carossio" loading="lazy" /> </a> </li> </ul> <div class="post-card-byline-content"> <span class="post-card-byline-author"><a href="/blog/author/sanjana/">Sanjana Iyer</a>, <a href="/blog/author/antoine/">Antoine Carossio</a></span> <span class="post-card-byline-date"><time datetime="2024-12-10">Dec 10, 2024</time> <span class="bull">•</span> 15 min read</span> </div> </footer> </div> </article> <article class="post-card post tag-application-security tag-api-security "> <a class="post-card-image-link" href="/blog/qualys-dast-2/"> <img class="post-card-image" srcset="/blog/content/images/size/w300/2024/11/qualys-dast.png 300w, /blog/content/images/size/w600/2024/11/qualys-dast.png 600w, /blog/content/images/size/w1000/2024/11/qualys-dast.png 1000w, /blog/content/images/size/w2000/2024/11/qualys-dast.png 2000w" sizes="(max-width: 1000px) 400px, 800px" src="/blog/content/images/size/w600/2024/11/qualys-dast.png" alt="Qualys DAST: Key Features and Alternatives" loading="lazy" /> </a> <div class="post-card-content"> <a class="post-card-content-link" href="/blog/qualys-dast-2/"> <header class="post-card-header"> <div class="post-card-primary-tag">Application Security</div> <h2 class="post-card-title">Qualys DAST: Key Features and Alternatives</h2> </header> <div class="post-card-excerpt"> <p>Dynamic application security testing (DAST) is a cornerstone of any robust Product Security Program, yet finding a top DAST tool that combines thoroughness with usability remains a challenge. Qualys DAST took its place as a solution for hundreds of organizations, but when we talk with AppSec engineers, questions often arise</p> </div> </a> <footer class="post-card-meta"> <ul class="author-list"> <li class="author-list-item"> <a href="/blog/author/alexandra/" class="static-avatar"> <img class="author-profile-image" src="/blog/content/images/size/w100/2023/09/profile.jpeg" alt="Alexandra Charikova" loading="lazy" /> </a> </li> </ul> <div class="post-card-byline-content"> <span class="post-card-byline-author"><a href="/blog/author/alexandra/">Alexandra Charikova</a></span> <span class="post-card-byline-date"><time datetime="2024-12-07">Dec 7, 2024</time> <span class="bull">•</span> 10 min read</span> </div> </footer> </div> </article> <article class="post-card post tag-product-updates "> <a class="post-card-image-link" href="/blog/introducing-private-locations/"> <img class="post-card-image" srcset="/blog/content/images/size/w300/2024/12/introducing-private-locations-escape.png 300w, /blog/content/images/size/w600/2024/12/introducing-private-locations-escape.png 600w, /blog/content/images/size/w1000/2024/12/introducing-private-locations-escape.png 1000w, /blog/content/images/size/w2000/2024/12/introducing-private-locations-escape.png 2000w" sizes="(max-width: 1000px) 400px, 800px" src="/blog/content/images/size/w600/2024/12/introducing-private-locations-escape.png" alt="Introducing Private Locations: Securely Scan Your Internal Applications" loading="lazy" /> </a> <div class="post-card-content"> <a class="post-card-content-link" href="/blog/introducing-private-locations/"> <header class="post-card-header"> <div class="post-card-primary-tag">Product updates</div> <h2 class="post-card-title">Introducing Private Locations: Securely Scan Your Internal Applications</h2> </header> <div class="post-card-excerpt"> <p>While public applications often receive focused attention, the reality is that many critical applications operate behind firewalls, VPNs, or in private networks. These internal apps can be just as vulnerable to attacks鈥攂ut securing them without disrupting your infrastructure can be a challenge. Today, we鈥檙e introducing Private Locations, a</p> </div> </a> <footer class="post-card-meta"> <ul class="author-list"> <li class="author-list-item"> <a href="/blog/author/alexandra/" class="static-avatar"> <img class="author-profile-image" src="/blog/content/images/size/w100/2023/09/profile.jpeg" alt="Alexandra Charikova" loading="lazy" /> </a> </li> </ul> <div class="post-card-byline-content"> <span class="post-card-byline-author"><a href="/blog/author/alexandra/">Alexandra Charikova</a></span> <span class="post-card-byline-date"><time datetime="2024-12-06">Dec 6, 2024</time> <span class="bull">•</span> 3 min read</span> </div> </footer> </div> </article> <article class="post-card post tag-the-elephant-in-appsec tag-shift-left tag-application-security "> <a class="post-card-image-link" href="/blog/the-elephant-in-appsec-talks-highlight-shifting-left-doesnt-mean-anything-anymore/"> <img class="post-card-image" srcset="/blog/content/images/size/w300/2024/11/Templates---BLOG--3---1-.svg 300w, /blog/content/images/size/w600/2024/11/Templates---BLOG--3---1-.svg 600w, /blog/content/images/size/w1000/2024/11/Templates---BLOG--3---1-.svg 1000w, /blog/content/images/size/w2000/2024/11/Templates---BLOG--3---1-.svg 2000w" sizes="(max-width: 1000px) 400px, 800px" src="/blog/content/images/size/w600/2024/11/Templates---BLOG--3---1-.svg" alt="The Elephant in AppSec Talks Highlight: Shifting Left Doesn't Mean Anything Anymore" loading="lazy" /> </a> <div class="post-card-content"> <a class="post-card-content-link" href="/blog/the-elephant-in-appsec-talks-highlight-shifting-left-doesnt-mean-anything-anymore/"> <header class="post-card-header"> <div class="post-card-primary-tag">The Elephant in AppSec</div> <h2 class="post-card-title">The Elephant in AppSec Talks Highlight: Shifting Left Doesn't Mean Anything Anymore</h2> </header> <div class="post-card-excerpt"> <p>Discover key highlights from Tanya Janca's talk at The Elephant in AppSec Conference on shifting security to be present throughout the entire Software Development Lifecycle.</p> </div> </a> <footer class="post-card-meta"> <ul class="author-list"> <li class="author-list-item"> <a href="/blog/author/sanjana/" class="static-avatar"> <img class="author-profile-image" src="/blog/content/images/size/w100/2024/11/me.jpeg" alt="Sanjana Iyer" loading="lazy" /> </a> </li> </ul> <div class="post-card-byline-content"> <span class="post-card-byline-author"><a href="/blog/author/sanjana/">Sanjana Iyer</a></span> <span class="post-card-byline-date"><time datetime="2024-11-26">Nov 26, 2024</time> <span class="bull">•</span> 5 min read</span> </div> </footer> </div> </article> <article class="post-card post tag-application-security tag-the-elephant-in-appsec tag-security-champions tag-shift-left "> <a class="post-card-image-link" href="/blog/the-elephant-in-appsec-conference-talk-highlight-ai-in-appsec-why-we-need-to-prioritize-security/"> <img class="post-card-image" srcset="/blog/content/images/size/w300/2024/11/Templates---BLOG.svg 300w, /blog/content/images/size/w600/2024/11/Templates---BLOG.svg 600w, /blog/content/images/size/w1000/2024/11/Templates---BLOG.svg 1000w, /blog/content/images/size/w2000/2024/11/Templates---BLOG.svg 2000w" sizes="(max-width: 1000px) 400px, 800px" src="/blog/content/images/size/w600/2024/11/Templates---BLOG.svg" alt="The Elephant in AppSec Conference Panel Highlight: Why scaling AppSec is harder than you think" loading="lazy" /> </a> <div class="post-card-content"> <a class="post-card-content-link" href="/blog/the-elephant-in-appsec-conference-talk-highlight-ai-in-appsec-why-we-need-to-prioritize-security/"> <header class="post-card-header"> <div class="post-card-primary-tag">Application Security</div> <h2 class="post-card-title">The Elephant in AppSec Conference Panel Highlight: Why scaling AppSec is harder than you think</h2> </header> <div class="post-card-excerpt"> <p>Key takeaways from highly experienced industry experts on how to scale application security from the panel in Track 1 of The Elephant in AppSec Conference.</p> </div> </a> <footer class="post-card-meta"> <ul class="author-list"> <li class="author-list-item"> <a href="/blog/author/sanjana/" class="static-avatar"> <img class="author-profile-image" src="/blog/content/images/size/w100/2024/11/me.jpeg" alt="Sanjana Iyer" loading="lazy" /> </a> </li> </ul> <div class="post-card-byline-content"> <span class="post-card-byline-author"><a href="/blog/author/sanjana/">Sanjana Iyer</a></span> <span class="post-card-byline-date"><time datetime="2024-11-22">Nov 22, 2024</time> <span class="bull">•</span> 5 min read</span> </div> </footer> </div> </article> <article class="post-card post tag-application-security tag-api-security tag-security-research "> <a class="post-card-image-link" href="/blog/fortune-1000-at-risk-30k-exposed-apis-100k-vulnerabilities/"> <img class="post-card-image" srcset="/blog/content/images/size/w300/2024/11/Report---Main-Visual.png 300w, /blog/content/images/size/w600/2024/11/Report---Main-Visual.png 600w, /blog/content/images/size/w1000/2024/11/Report---Main-Visual.png 1000w, /blog/content/images/size/w2000/2024/11/Report---Main-Visual.png 2000w" sizes="(max-width: 1000px) 400px, 800px" src="/blog/content/images/size/w600/2024/11/Report---Main-Visual.png" alt="Fortune 1000 at risk: How we discovered 30k exposed APIs & 100k API vulnerabilities in the world鈥檚 largest organizations" loading="lazy" /> </a> <div class="post-card-content"> <a class="post-card-content-link" href="/blog/fortune-1000-at-risk-30k-exposed-apis-100k-vulnerabilities/"> <header class="post-card-header"> <div class="post-card-primary-tag">Application Security</div> <h2 class="post-card-title">Fortune 1000 at risk: How we discovered 30k exposed APIs & 100k API vulnerabilities in the world鈥檚 largest organizations</h2> </header> <div class="post-card-excerpt"> <p>Hey there! Next week, social media will be flooded with Thanksgiving feasts (and Black Friday deals). But before you dive into the holiday shopping madness, the Escape team has prepared a special treat for you鈥攏ot a Black Friday deal on Escape, of course, but rather some impressive findings on</p> </div> </a> <footer class="post-card-meta"> <ul class="author-list"> <li class="author-list-item"> <a href="/blog/author/alexandra/" class="static-avatar"> <img class="author-profile-image" src="/blog/content/images/size/w100/2023/09/profile.jpeg" alt="Alexandra Charikova" loading="lazy" /> </a> </li> <li class="author-list-item"> <a href="/blog/author/maxence/" class="static-avatar"> <img class="author-profile-image" src="/blog/content/images/size/w100/2021/10/U5pV30Ab_400x400.jpg" alt="Maxence Lecanu" loading="lazy" /> </a> </li> <li class="author-list-item"> <a href="/blog/author/quentin/" class="static-avatar"> <img class="author-profile-image" src="https://www.gravatar.com/avatar/e7c9d1795b321849f3d7a36b6a522d59?s=250&r=x&d=mp" alt="Quentin Lieumont" loading="lazy" /> </a> </li> <li class="author-list-item"> <a href="/blog/author/gabriel/" class="static-avatar"> <img class="author-profile-image" src="/blog/content/images/size/w100/2024/11/Gabriel.png" alt="Gabriel Marquet" loading="lazy" /> </a> </li> </ul> <div class="post-card-byline-content"> <span class="post-card-byline-author">Multiple authors</span> <span class="post-card-byline-date"><time datetime="2024-11-20">Nov 20, 2024</time> <span class="bull">•</span> 6 min read</span> </div> </footer> </div> </article> <article class="post-card post tag-api-security tag-the-elephant-in-appsec tag-dast "> <a class="post-card-image-link" href="/blog/the-elephant-in-appsec-talks-highlight-reinventing-api-security/"> <img class="post-card-image" srcset="/blog/content/images/size/w300/2024/11/Templates---BLOG--1---2-.svg 300w, /blog/content/images/size/w600/2024/11/Templates---BLOG--1---2-.svg 600w, /blog/content/images/size/w1000/2024/11/Templates---BLOG--1---2-.svg 1000w, /blog/content/images/size/w2000/2024/11/Templates---BLOG--1---2-.svg 2000w" sizes="(max-width: 1000px) 400px, 800px" src="/blog/content/images/size/w600/2024/11/Templates---BLOG--1---2-.svg" alt="The Elephant in AppSec Talks Highlight: Reinventing API Security" loading="lazy" /> </a> <div class="post-card-content"> <a class="post-card-content-link" href="/blog/the-elephant-in-appsec-talks-highlight-reinventing-api-security/"> <header class="post-card-header"> <div class="post-card-primary-tag">API Security</div> <h2 class="post-card-title">The Elephant in AppSec Talks Highlight: Reinventing API Security</h2> </header> <div class="post-card-excerpt"> <p>Highlights from Escape's talks at The Elephant in AppSec Conference on the challenges of API security and how Escape is overcoming these</p> </div> </a> <footer class="post-card-meta"> <ul class="author-list"> <li class="author-list-item"> <a href="/blog/author/sanjana/" class="static-avatar"> <img class="author-profile-image" src="/blog/content/images/size/w100/2024/11/me.jpeg" alt="Sanjana Iyer" loading="lazy" /> </a> </li> </ul> <div class="post-card-byline-content"> <span class="post-card-byline-author"><a href="/blog/author/sanjana/">Sanjana Iyer</a></span> <span class="post-card-byline-date"><time datetime="2024-11-18">Nov 18, 2024</time> <span class="bull">•</span> 6 min read</span> </div> </footer> </div> </article> <article class="post-card post tag-api-security tag-application-security "> <a class="post-card-image-link" href="/blog/api-security-day-2024/"> <img class="post-card-image" srcset="/blog/content/images/size/w300/2024/11/api-security-day-blog.png 300w, /blog/content/images/size/w600/2024/11/api-security-day-blog.png 600w, /blog/content/images/size/w1000/2024/11/api-security-day-blog.png 1000w, /blog/content/images/size/w2000/2024/11/api-security-day-blog.png 2000w" sizes="(max-width: 1000px) 400px, 800px" src="/blog/content/images/size/w600/2024/11/api-security-day-blog.png" alt="API Security Day - powered by APIDays & Escape" loading="lazy" /> </a> <div class="post-card-content"> <a class="post-card-content-link" href="/blog/api-security-day-2024/"> <header class="post-card-header"> <div class="post-card-primary-tag">API Security</div> <h2 class="post-card-title">API Security Day - powered by APIDays & Escape</h2> </header> <div class="post-card-excerpt"> <p>Are you ready to dive deep into API security? Join Escape's team for a focused, one-day event at the APIDays Paris. Learn from industry leaders and discover the latest strategies and technologies to protect your APIs. Whether you're a cybersecurity professional, API developer, or API architect,</p> </div> </a> <footer class="post-card-meta"> <ul class="author-list"> <li class="author-list-item"> <a href="/blog/author/alexandra/" class="static-avatar"> <img class="author-profile-image" src="/blog/content/images/size/w100/2023/09/profile.jpeg" alt="Alexandra Charikova" loading="lazy" /> </a> </li> </ul> <div class="post-card-byline-content"> <span class="post-card-byline-author"><a href="/blog/author/alexandra/">Alexandra Charikova</a></span> <span class="post-card-byline-date"><time datetime="2024-11-15">Nov 15, 2024</time> <span class="bull">•</span> 2 min read</span> </div> </footer> </div> </article> <article class="post-card post tag-the-elephant-in-appsec tag-application-security tag-events "> <a class="post-card-image-link" href="/blog/the-elephant-in-appsec-conference-4-key-takeaways/"> <img class="post-card-image" srcset="/blog/content/images/size/w300/2024/11/Key-takeaways-blog-post-banner-2.png 300w, /blog/content/images/size/w600/2024/11/Key-takeaways-blog-post-banner-2.png 600w, /blog/content/images/size/w1000/2024/11/Key-takeaways-blog-post-banner-2.png 1000w, /blog/content/images/size/w2000/2024/11/Key-takeaways-blog-post-banner-2.png 2000w" sizes="(max-width: 1000px) 400px, 800px" src="/blog/content/images/size/w600/2024/11/Key-takeaways-blog-post-banner-2.png" alt="The Elephant in AppSec Conference: 4 Key Takeaways" loading="lazy" /> </a> <div class="post-card-content"> <a class="post-card-content-link" href="/blog/the-elephant-in-appsec-conference-4-key-takeaways/"> <header class="post-card-header"> <div class="post-card-primary-tag">The Elephant in AppSec</div> <h2 class="post-card-title">The Elephant in AppSec Conference: 4 Key Takeaways</h2> </header> <div class="post-card-excerpt"> <p>Here are the key takeaways from the Elephant in AppSec Conference, uncovering the top insights from industry experts in application security.</p> </div> </a> <footer class="post-card-meta"> <ul class="author-list"> <li class="author-list-item"> <a href="/blog/author/sanjana/" class="static-avatar"> <img class="author-profile-image" src="/blog/content/images/size/w100/2024/11/me.jpeg" alt="Sanjana Iyer" loading="lazy" /> </a> </li> </ul> <div class="post-card-byline-content"> <span class="post-card-byline-author"><a href="/blog/author/sanjana/">Sanjana Iyer</a></span> <span class="post-card-byline-date"><time datetime="2024-11-14">Nov 14, 2024</time> <span class="bull">•</span> 6 min read</span> </div> </footer> </div> </article> <article class="post-card post tag-competitor-comparison tag-api-security tag-application-security "> <a class="post-card-image-link" href="/blog/top-traceable-api-security-alternative-escape-vs-traceable/"> <img class="post-card-image" srcset="/blog/content/images/size/w300/2024/09/Escape-vs-Traceable.png 300w, /blog/content/images/size/w600/2024/09/Escape-vs-Traceable.png 600w, /blog/content/images/size/w1000/2024/09/Escape-vs-Traceable.png 1000w, /blog/content/images/size/w2000/2024/09/Escape-vs-Traceable.png 2000w" sizes="(max-width: 1000px) 400px, 800px" src="/blog/content/images/size/w600/2024/09/Escape-vs-Traceable.png" alt="Top Traceable API Security Alternative: Escape vs. Traceable" loading="lazy" /> </a> <div class="post-card-content"> <a class="post-card-content-link" href="/blog/top-traceable-api-security-alternative-escape-vs-traceable/"> <header class="post-card-header"> <div class="post-card-primary-tag">Competitor Comparison</div> <h2 class="post-card-title">Top Traceable API Security Alternative: Escape vs. Traceable</h2> </header> <div class="post-card-excerpt"> <p>Learn why Escape鈥檚 agentless discovery and developer-friendly testing make it a top Traceable alternative.</p> </div> </a> <footer class="post-card-meta"> <ul class="author-list"> <li class="author-list-item"> <a href="/blog/author/alexandra/" class="static-avatar"> <img class="author-profile-image" src="/blog/content/images/size/w100/2023/09/profile.jpeg" alt="Alexandra Charikova" loading="lazy" /> </a> </li> </ul> <div class="post-card-byline-content"> <span class="post-card-byline-author"><a href="/blog/author/alexandra/">Alexandra Charikova</a></span> <span class="post-card-byline-date"><time datetime="2024-11-04">Nov 4, 2024</time> <span class="bull">•</span> 9 min read</span> </div> </footer> </div> </article> <article class="post-card post tag-competitor-comparison tag-api-security tag-application-security "> <a class="post-card-image-link" href="/blog/escape-vs-qualys/"> <img class="post-card-image" srcset="/blog/content/images/size/w300/2024/10/escape-vs-qualys.png 300w, /blog/content/images/size/w600/2024/10/escape-vs-qualys.png 600w, /blog/content/images/size/w1000/2024/10/escape-vs-qualys.png 1000w, /blog/content/images/size/w2000/2024/10/escape-vs-qualys.png 2000w" sizes="(max-width: 1000px) 400px, 800px" src="/blog/content/images/size/w600/2024/10/escape-vs-qualys.png" alt="Top Qualys Alternative: Escape vs Qualys" loading="lazy" /> </a> <div class="post-card-content"> <a class="post-card-content-link" href="/blog/escape-vs-qualys/"> <header class="post-card-header"> <div class="post-card-primary-tag">Competitor Comparison</div> <h2 class="post-card-title">Top Qualys Alternative: Escape vs Qualys</h2> </header> <div class="post-card-excerpt"> <p>Discover why Escape is a better DAST alternative to Qualys for API testing.</p> </div> </a> <footer class="post-card-meta"> <ul class="author-list"> <li class="author-list-item"> <a href="/blog/author/alexandra/" class="static-avatar"> <img class="author-profile-image" src="/blog/content/images/size/w100/2023/09/profile.jpeg" alt="Alexandra Charikova" loading="lazy" /> </a> </li> </ul> <div class="post-card-byline-content"> <span class="post-card-byline-author"><a href="/blog/author/alexandra/">Alexandra Charikova</a></span> <span class="post-card-byline-date"><time datetime="2024-10-21">Oct 21, 2024</time> <span class="bull">•</span> 10 min read</span> </div> </footer> </div> </article> <article class="post-card post tag-application-security "> <a class="post-card-image-link" href="/blog/application-security-podcasts-to-know/"> <img class="post-card-image" srcset="/blog/content/images/size/w300/2024/10/AppSec-Podcasts--1-.png 300w, /blog/content/images/size/w600/2024/10/AppSec-Podcasts--1-.png 600w, /blog/content/images/size/w1000/2024/10/AppSec-Podcasts--1-.png 1000w, /blog/content/images/size/w2000/2024/10/AppSec-Podcasts--1-.png 2000w" sizes="(max-width: 1000px) 400px, 800px" src="/blog/content/images/size/w600/2024/10/AppSec-Podcasts--1-.png" alt="Application Security Podcasts to know" loading="lazy" /> </a> <div class="post-card-content"> <a class="post-card-content-link" href="/blog/application-security-podcasts-to-know/"> <header class="post-card-header"> <div class="post-card-primary-tag">Application Security</div> <h2 class="post-card-title">Application Security Podcasts to know</h2> </header> <div class="post-card-excerpt"> <p>Discover Application Security podcasts you should listen to in 2024</p> </div> </a> <footer class="post-card-meta"> <ul class="author-list"> <li class="author-list-item"> <a href="/blog/author/alexandra/" class="static-avatar"> <img class="author-profile-image" src="/blog/content/images/size/w100/2023/09/profile.jpeg" alt="Alexandra Charikova" loading="lazy" /> </a> </li> </ul> <div class="post-card-byline-content"> <span class="post-card-byline-author"><a href="/blog/author/alexandra/">Alexandra Charikova</a></span> <span class="post-card-byline-date"><time datetime="2024-10-09">Oct 9, 2024</time> <span class="bull">•</span> 5 min read</span> </div> </footer> </div> </article> <article class="post-card post tag-api-security tag-application-security tag-competitor-comparison "> <a class="post-card-image-link" href="/blog/escape-vs-invicti/"> <img class="post-card-image" srcset="/blog/content/images/size/w300/2024/10/Escape-vs-Invicti.png 300w, /blog/content/images/size/w600/2024/10/Escape-vs-Invicti.png 600w, /blog/content/images/size/w1000/2024/10/Escape-vs-Invicti.png 1000w, /blog/content/images/size/w2000/2024/10/Escape-vs-Invicti.png 2000w" sizes="(max-width: 1000px) 400px, 800px" src="/blog/content/images/size/w600/2024/10/Escape-vs-Invicti.png" alt="Escape vs Invicti" loading="lazy" /> </a> <div class="post-card-content"> <a class="post-card-content-link" href="/blog/escape-vs-invicti/"> <header class="post-card-header"> <div class="post-card-primary-tag">API Security</div> <h2 class="post-card-title">Escape vs Invicti</h2> </header> <div class="post-card-excerpt"> <p>Discover why Escape is a better API security solution.</p> </div> </a> <footer class="post-card-meta"> <ul class="author-list"> <li class="author-list-item"> <a href="/blog/author/alexandra/" class="static-avatar"> <img class="author-profile-image" src="/blog/content/images/size/w100/2023/09/profile.jpeg" alt="Alexandra Charikova" loading="lazy" /> </a> </li> </ul> <div class="post-card-byline-content"> <span class="post-card-byline-author"><a href="/blog/author/alexandra/">Alexandra Charikova</a></span> <span class="post-card-byline-date"><time datetime="2024-10-04">Oct 4, 2024</time> <span class="bull">•</span> 11 min read</span> </div> </footer> </div> </article> <article class="post-card post tag-application-security tag-the-elephant-in-appsec "> <a class="post-card-image-link" href="/blog/the-schedule-is-live-the-elephant-in-appsec-conference/"> <img class="post-card-image" srcset="/blog/content/images/size/w300/2024/10/The-Elephant-in-AppSec-Conference-Announcement.png 300w, /blog/content/images/size/w600/2024/10/The-Elephant-in-AppSec-Conference-Announcement.png 600w, /blog/content/images/size/w1000/2024/10/The-Elephant-in-AppSec-Conference-Announcement.png 1000w, /blog/content/images/size/w2000/2024/10/The-Elephant-in-AppSec-Conference-Announcement.png 2000w" sizes="(max-width: 1000px) 400px, 800px" src="/blog/content/images/size/w600/2024/10/The-Elephant-in-AppSec-Conference-Announcement.png" alt="The Schedule is Live: The Elephant in AppSec Conference" loading="lazy" /> </a> <div class="post-card-content"> <a class="post-card-content-link" href="/blog/the-schedule-is-live-the-elephant-in-appsec-conference/"> <header class="post-card-header"> <div class="post-card-primary-tag">Application Security</div> <h2 class="post-card-title">The Schedule is Live: The Elephant in AppSec Conference</h2> </header> <div class="post-card-excerpt"> <p>The Elephant in AppSec Conference agenda is live! It鈥檚 packed with sessions that dive into what鈥檚 broken in AppSec, how to fix it, and unique insights from top experts on the latest AppSec tooling. Prepare for bold opinions and fresh perspectives, where the best in Application Security come</p> </div> </a> <footer class="post-card-meta"> <ul class="author-list"> <li class="author-list-item"> <a href="/blog/author/alexandra/" class="static-avatar"> <img class="author-profile-image" src="/blog/content/images/size/w100/2023/09/profile.jpeg" alt="Alexandra Charikova" loading="lazy" /> </a> </li> </ul> <div class="post-card-byline-content"> <span class="post-card-byline-author"><a href="/blog/author/alexandra/">Alexandra Charikova</a></span> <span class="post-card-byline-date"><time datetime="2024-10-03">Oct 3, 2024</time> <span class="bull">•</span> 2 min read</span> </div> </footer> </div> </article> <article class="post-card post tag-api-security tag-application-security "> <a class="post-card-image-link" href="/blog/forresters-ciso-budget-planning-guide-for-2025-api-security/"> <img class="post-card-image" srcset="/blog/content/images/size/w300/2024/09/Forrester-CISO-Guide.png 300w, /blog/content/images/size/w600/2024/09/Forrester-CISO-Guide.png 600w, /blog/content/images/size/w1000/2024/09/Forrester-CISO-Guide.png 1000w, /blog/content/images/size/w2000/2024/09/Forrester-CISO-Guide.png 2000w" sizes="(max-width: 1000px) 400px, 800px" src="/blog/content/images/size/w600/2024/09/Forrester-CISO-Guide.png" alt="Forrester's CISO Budget Planning Guide for 2025: Prioritize API Security" loading="lazy" /> </a> <div class="post-card-content"> <a class="post-card-content-link" href="/blog/forresters-ciso-budget-planning-guide-for-2025-api-security/"> <header class="post-card-header"> <div class="post-card-primary-tag">API Security</div> <h2 class="post-card-title">Forrester's CISO Budget Planning Guide for 2025: Prioritize API Security</h2> </header> <div class="post-card-excerpt"> <p>As we head into 2025, planning a robust security budget is more critical than ever. According to Forrester's latest Budget Planning Guide for Security and Risk Leaders, one element stands out as indispensable: API security. APIs form the backbone of modern digital interactions, connecting services, platforms, and users.</p> </div> </a> <footer class="post-card-meta"> <ul class="author-list"> <li class="author-list-item"> <a href="/blog/author/alexandra/" class="static-avatar"> <img class="author-profile-image" src="/blog/content/images/size/w100/2023/09/profile.jpeg" alt="Alexandra Charikova" loading="lazy" /> </a> </li> </ul> <div class="post-card-byline-content"> <span class="post-card-byline-author"><a href="/blog/author/alexandra/">Alexandra Charikova</a></span> <span class="post-card-byline-date"><time datetime="2024-09-30">Sep 30, 2024</time> <span class="bull">•</span> 10 min read</span> </div> </footer> </div> </article> </div> </div> </main> </div> <footer class="site-footer outer"> <div class="inner"> <section class="copyright"><a href="https://escape.tech/blog">Escape - The API Security Blog</a> © 2025</section> <nav class="site-footer-nav"> <ul class="nav"> <li class="nav-get-a-demo"><a href="https://calendly.com/d/46g-xzy-dgw">Get a demo</a></li> <li class="nav-escapes-proprietary-business-logic-algorithm"><a href="https://escape.tech/blog/escape-proprietary-algorithm/">Escape's proprietary business logic algorithm</a></li> <li class="nav-best-practices"><a href="https://escape.tech/blog/tag/best-practices/">Best Practices</a></li> <li class="nav-case-studies"><a href="https://escape.tech/blog/tag/case-study/">Case Studies</a></li> <li class="nav-learn-how-to-test-your-graphql-apis"><a href="https://escape.tech/blog/testing-your-graphql-api/">Learn how to test your GraphQL APIs</a></li> <li class="nav-grpc-api-security"><a href="https://escape.tech/blog/how-to-secure-grpc-apis/">gRPC API Security</a></li> <li class="nav-how-to-use-graphql-with-postman"><a href="https://escape.tech/blog/getting-started-with-postman-graphql/">How to use GraphQL with Postman</a></li> <li class="nav-graphql-security"><a href="https://escape.tech/blog/tag/graphql/">GraphQL Security</a></li> <li class="nav-graphql-errors"><a href="https://escape.tech/blog/graphql-errors-the-good-the-bad-and-the-ugly/">GraphQL Errors</a></li> <li class="nav-graphql-armor"><a href="https://escape.tech/graphql-armor/">GraphQL Armor</a></li> <li class="nav-escape-community"><a href="https://join.slack.com/t/escapecommunity/shared_invite/zt-2cpklvqqv-m_h4fzlZhSatxcrxetf3Fg">Escape Community</a></li> <li class="nav-about-us"><a href="https://escape.tech/company/">About Us</a></li> <li class="nav-privacy-policy"><a href="https://escape.tech/privacy/">Privacy Policy</a></li> <li class="nav-api-security-academy"><a href="https://escape.tech/academy/">API Security Academy</a></li> <li class="nav-api-gateway-security-best-practices"><a href="https://escape.tech/blog/api-gateway-security/">API Gateway Security Best Practices</a></li> </ul> </nav> </div> </footer> </div> <script src="https://code.jquery.com/jquery-3.5.1.min.js" integrity="sha256-9/aliU8dGd2tb6OSsuzixeV4y/faTqgFtohetphbbj0=" crossorigin="anonymous"> </script> <script src="/blog/assets/built/casper.js?v=bdd0505571"></script> <script> $(document).ready(function () { // Mobile Menu Trigger $('.gh-burger').click(function () { $('body').toggleClass('gh-head-open'); }); // FitVids - Makes video embeds responsive $(".gh-content").fitVids(); }); </script> <script src="https://cdnjs.cloudflare.com/ajax/libs/prism/1.28.0/components/prism-core.min.js" integrity="sha512-9khQRAUBYEJDCDVP2yw3LRUQvjJ0Pjx0EShmaQjcHa6AXiOv6qHQu9lCAIR8O+/D8FtaCoJ2c0Tf9Xo7hYH01Q==" crossorigin="anonymous" referrerpolicy="no-referrer"></script> <script src="https://cdnjs.cloudflare.com/ajax/libs/prism/1.28.0/plugins/autoloader/prism-autoloader.min.js" integrity="sha512-fTl/qcO1VgvKtOMApX2PdZzkziyr2stM65GYPLGuYMnuMm1z2JLJG6XVU7C/mR+E7xBUqCivykuhlzfqxXBXbg==" crossorigin="anonymous" referrerpolicy="no-referrer"></script> <script src="https://cdnjs.cloudflare.com/ajax/libs/tocbot/4.12.3/tocbot.min.js"></script> <script> tocbot.init({ // Where to render the table of contents. tocSelector: '.gh-toc', // Where to grab the headings to build the table of contents. contentSelector: '.gh-content', // Which headings to grab inside of the contentSelector element. headingSelector: 'h1, h2, h3, h4', }); </script>  <noscript ><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-MDMBJH6V" height="0" width="0" style="display: none; visibility: hidden" ></iframe ></noscript>  <script src="https://cdnjs.cloudflare.com/ajax/libs/prism/1.25.0/prism.min.js" integrity="sha512-hpZ5pDCF2bRCweL5WoA0/N1elet1KYL5mx3LP555Eg/0ZguaHawxNvEjF6O3rufAChs16HVNhEc6blF/rZoowQ==" crossorigin="anonymous" referrerpolicy="no-referrer"></script> <script src="https://cdnjs.cloudflare.com/ajax/libs/prism/1.25.0/components/prism-yaml.min.js" crossorigin="anonymous" referrerpolicy="no-referrer"></script> <script src="https://cdnjs.cloudflare.com/ajax/libs/prism/1.25.0/components/prism-bash.min.js" crossorigin="anonymous" referrerpolicy="no-referrer"></script> <script src="https://cdnjs.cloudflare.com/ajax/libs/prism/1.25.0/components/prism-jsx.min.js" crossorigin="anonymous" referrerpolicy="no-referrer"></script>  <script type="text/javascript" id="hs-script-loader" async defer src="//js-eu1.hs-scripts.com/26857953.js"></script>  </body> </html>

CINXE.COM

Escape - The API Security Blog