API Security Courses and Certifications

API Platform Part 2: Security

Comprehensive API security tutorial covering authentication, authorization, data persistence, dynamic serialization, and custom validation for robust and secure API development.

• SymfonyCasts
• 4 hours 45 minutes
• On-Demand
• Paid Course

Hack Your API First

430 ratings at Pluralsight

Recent years have seen a massive explosion in the growth of rich client apps that talk over the web using APIs across HTTP, but unfortunately, all too often they contain serious security vulnerabilities that are actually very easy to locate.

• Pluralsight
• 4 hours 8 minutes
• On-Demand
• Free Trial Available

Specialized Testing: API Testing

48 ratings at Pluralsight

In the age of APIs, ensuring their bullet-proof security is paramount. This course will teach you how to probe APIs for different injection vulnerabilities, gather pentesting information, and use it to potentially exploit such vulnerabilities in APIs

• Pluralsight
• 56 minutes
• On-Demand
• Free Trial Available

Designing RESTful Web APIs

41 ratings at Pluralsight

Designing an API before you start to implement it is key to a quality REST API. In this course, you'll learn how to design a RESTful API.

• Pluralsight
• 1 hour 47 minutes
• On-Demand
• Free Trial Available

Developer Security Champion: API Security

13 ratings at Pluralsight

This course will teach you about securing web-based APIs. It’ll get you thinking about attacks, defenses, and the resources you should be using.

• Pluralsight
• 17 minutes
• On-Demand
• Free Trial Available

Okta

Kong API Gateway Integration with Okta OIDC Authentication

Integrate Kong API gateway with Okta OIDC for seamless authentication, eliminating the need for your application to manage OIDC flows directly.

• YouTube
• 22 minutes
• On-Demand
• Free Video

OWASP Foundation

Scanning with Swagger - Using the Open API Specification to Find Vulnerabilities

Explore leveraging Open API specification for enhanced security scanning, uncovering vulnerabilities and improving application protection strategies.

• YouTube
• 33 minutes
• On-Demand
• Free Video

OWASP Foundation

Automating API Penetration Testing Using Fuzzapi

Explore automated API penetration testing with fuzzapi, addressing common vulnerabilities in REST APIs. Learn to integrate security testing into development pipelines for early detection and mitigation.

• YouTube
• 46 minutes
• On-Demand
• Free Video

OWASP Foundation

API Authentication's Poorly Implemented - Security Issues in Web APIs

Explore real-world API security issues, focusing on authentication and authorization problems across various platforms. Learn from examples ranging from online payment systems to embedded device infrastructures.

• YouTube
• 39 minutes
• On-Demand
• Free Video

OWASP Foundation

The API Assessment Primer

Learn essential API security assessment techniques, including key considerations, testing steps, and best practices for protecting APIs and mobile applications from common vulnerabilities and threats.

• YouTube
• 39 minutes
• On-Demand
• Free Video

OWASP Foundation

Harmonizing OWASP API and Application Top 10 Security Risks - Combining Lists for Comprehensive Coverage

Explore API security risks, comparing OWASP's API and Application Top 10 lists. Learn detection and prevention strategies for vulnerabilities in web services, APIs, and GraphQL.

• YouTube
• 51 minutes
• On-Demand
• Free Video

OWASP Foundation

Webhooks Hookups - Abusing API Developers

Explore the security risks of Webhooks in API development, including potential vulnerabilities, real-world examples, and preventive measures. Learn about a new toolkit for auditing Webhook exposure.

• YouTube
• 26 minutes
• On-Demand
• Free Video

API Security for PCI Compliance (Data Security Standard)

Explore API security for PCI DSS 4.0, understanding its importance, requirements, and best practices to ensure compliance and protect payment card information in your organization.

• freeCodeCamp
• On-Demand
• Free Video

Okta

Advanced API Security with Kong - Developer Day 2021 Labs

Learn to secure APIs using Kong Gateway and Okta. Configure OIDC authentication for Kong Developer Portal and Manager, and explore various security plugins and features.

• YouTube
• 1 hour 17 minutes
• On-Demand
• Free Video

Okta

Integrating Identity into APIs with Okta and Kong - Developer Day 2021

Discover powerful authentication and authorization scenarios using Kong and Okta. Learn to implement sophisticated API access and management flows with OIDC and OAuth, including CI/CD pipeline integration.

• YouTube
• 30 minutes
• On-Demand
• Free Video