BLOG

Questions Answered: 42Crunch Security Audit for WSO2 API Manager 3.1

You had questions, and we’ve got answers!

Thank you for all the questions submitted on our “42Crunch Security Audit for WSO2 API Manager 3.1” webinar. Below is the replay and all the answers to the questions that were asked. If you’d like more information please feel free to contact us.

 

[xyz-ihs snippet=”WSO2-Webinar”]

 

 

 

Is this audit feature available with the community version of WSO2?

Yes it is. WSO2 delivers open source products which are fully functional.

 

What do you have to do on the 42Crunch side to enable this WSO2 feature?

You need to self-register and obtain an API token to be able to invoke the audit. The instructions are visible here: https://apim.docs.wso2.com/en/next/learn/api-security/configuring-api-security-audit/.

 

Is it possible to automate the solution of some problems?

Problem remediation requires knowledge of the API. It is very hard to automate the discovery of an OAS file beyond the basics (verb, path, header and query param names, basic schemas). For data formats and limits, you need to use inner knowledge of your data and processes. This said, at 42Crunch, we are working on making it easier to remediate issues by identifying repeating patterns, suggesting regular expressions and limits for known formats (like uuids, dates or credit card numbers) so that you can quickly remediate issues.

 

Try our security audit for free. If you want to see the whole platform in action, request a demo now!

Latest Resources

WEBINAR

Something Old, Something New – OWASP API Security Top 10 in 2023

42Crunch’s Colin Domoney takes a look at the new OWASP API Security 2023 listing, identifying which vulnerabilities are new, which have not changed and which have been removed.

NEWS

Payemoji and 42Crunch announce partnership

By Newsdesk | July 12, 2023

Dublin, Ireland – July 12, 2023 42Crunch, the automated API security testing and threat protection vendor and Payemoji’s conversational commerce solution announce partnership. Introduction to Conversational commerce API security Conversational commerce has transformed the way businesses engage with their customers. Through messaging platforms, voice assistants, and chatbots, companies […]

DataSheet

APIs are the core building block of every enterprise’s digital strategy, yet they are also the number one attack surface for hackers. 42Crunch makes developers’ and security practitioners' lives easier by protecting APIs, with a platform that automates security into the API development pipeline and gives full oversight of security policy enforcement at every stage of the API lifecycle.

WEBINAR

Something Old, Something New – OWASP API Security Top 10 in 2023

42Crunch’s Colin Domoney takes a look at the new OWASP API Security 2023 listing, identifying which vulnerabilities are new, which have not changed and which have been removed.

NEWS

Payemoji and 42Crunch announce partnership

By Newsdesk | July 12, 2023

Dublin, Ireland – July 12, 2023 42Crunch, the automated API security testing and threat protection vendor and Payemoji’s conversational commerce solution announce partnership. Introduction to Conversational commerce API security Conversational commerce has transformed the way businesses engage with their customers. Through messaging platforms, voice assistants, and chatbots, companies […]

DataSheet

Datasheet Cover Images P1-02

Product Datasheet Addressing API Security Challenges

APIs are the core building block of every enterprise’s digital strategy, yet they are also the number one attack surface for hackers. 42Crunch makes developers’ and security practitioners' lives easier by protecting APIs, with a platform that automates security into the API development pipeline and gives full oversight of security policy enforcement at every stage of the API lifecycle.

Ready to Learn More?

Developer-first solution for delivering API security as code.