API Security Courses and Certifications

OWASP API Security TOP 10 : A comprehensive guide

928 ratings at Udemy

Mastering API Protection: From Basic Principles to Advanced Risk Mitigation (2024 Updated)

• Udemy
• 1 hour 54 minutes
• On-Demand
• Paid Course

Hacking REST APIs - A beginner's guide

890 ratings at Udemy

Practical guide to pentesting REST APIs from scratch

• Udemy
• 1 hour 8 minutes
• On-Demand
• Paid Course

OWASP API Security Top 10 latest standards

24 ratings at Udemy

Master OWASP's latest API security standards, exploring top 10 risks through real-world examples and learning practical mitigation strategies to protect your applications from vulnerabilities.

• Udemy
• 3 hours 14 minutes
• On-Demand
• Paid Course

API Platform Part 2: Security

Comprehensive API security tutorial covering authentication, authorization, data persistence, dynamic serialization, and custom validation for robust and secure API development.

• SymfonyCasts
• 4 hours 45 minutes
• On-Demand
• Paid Course

Hack Your API First

430 ratings at Pluralsight

Recent years have seen a massive explosion in the growth of rich client apps that talk over the web using APIs across HTTP, but unfortunately, all too often they contain serious security vulnerabilities that are actually very easy to locate.

• Pluralsight
• 4 hours 8 minutes
• On-Demand
• Free Trial Available

Specialized Testing: API Testing

49 ratings at Pluralsight

In the age of APIs, ensuring their bullet-proof security is paramount. This course will teach you how to probe APIs for different injection vulnerabilities, gather pentesting information, and use it to potentially exploit such vulnerabilities in APIs

• Pluralsight
• 56 minutes
• On-Demand
• Free Trial Available

Designing RESTful Web APIs

44 ratings at Pluralsight

Designing an API before you start to implement it is key to a quality REST API. In this course, you'll learn how to design a RESTful API.

• Pluralsight
• 1 hour 47 minutes
• On-Demand
• Free Trial Available

Developer Security Champion: API Security

13 ratings at Pluralsight

This course will teach you about securing web-based APIs. It’ll get you thinking about attacks, defenses, and the resources you should be using.

• Pluralsight
• 17 minutes
• On-Demand
• Free Trial Available

LASCON

How to Hack an API in 15 Minutes

Discover how hackers exploit Shadow APIs to extract large volumes of data quickly. Learn about this basic yet non-obvious security vulnerability and creative methods used by attackers.

• YouTube
• 48 minutes
• On-Demand
• Free Video

LASCON

Using API Specifications to Attack APIs

Explore API security vulnerabilities, breaches, and scanning tools. Learn to leverage API specifications for both protection and potential exploitation in this comprehensive overview.

• YouTube
• 57 minutes
• On-Demand
• Free Video

LASCON

Hacking and Defending APIs - Red and Blue Make Purple

Comprehensive guide to API security: attack techniques, defense strategies, and best practices for both testers and defenders. Covers BOLA, authentication, data exposure, and more.

• YouTube
• 53 minutes
• On-Demand
• Free Video

LASCON

API Security Through External Attack Surface Management

Integrating APIs into External Attack Surface Management to improve security posture of external-facing APIs. Discusses challenges in asset visibility and strategies for effective protection.

• YouTube
• 35 minutes
• On-Demand
• Free Video

LASCON

API Security Best Practices and Guidelines - 2016

Explore industry-leading best practices for designing secure APIs, navigating standards, and protecting both public and private APIs to maximize benefits while keeping threats at bay.

• YouTube
• 50 minutes
• On-Demand
• Free Video

Cyber Mentor

Hacking APIs - Fuzzing 101

Learn API fuzzing techniques for penetration testing and security assessment, with hands-on lab demonstrating practical application and methodology.

• YouTube
• 13 minutes
• On-Demand
• Free Video

Cyber Mentor

API Information Disclosure - Real-World Bug Hunting

Explore API information disclosure vulnerabilities and learn effective techniques for identifying and exploiting these security weaknesses in web applications.

• YouTube
• 18 minutes
• On-Demand
• Free Video