{"id":189,"date":"2022-04-08T14:06:26","date_gmt":"2022-04-08T13:06:26","guid":{"rendered":"https:\/\/42crdev.prexihost.com\/?page_id=189"},"modified":"2024-02-13T10:41:55","modified_gmt":"2024-02-13T10:41:55","slug":"api-security-audit","status":"publish","type":"page","link":"https:\/\/staging2022.42crunch.com\/api-security-audit\/","title":{"rendered":"API Audit"},"content":{"rendered":"\n\n\t\t<h1>\n\t\t\tAPI Audit\n\t\t\t\t\t\tOptimize your API security at design time\n\t\t<\/h1>\n\t\t\t<a href=\"https:\/\/staging2022.42crunch.com\/tools\/free-audit\/\" target=\"_self\" rel=\"noopener\">\n\t\t\t\t\t\t\tFree Online Audit Tool\n\t\t\t\t\t<\/a>\n\t\t\t\t<a href=\"https:\/\/staging2022.42crunch.com\/wp-content\/uploads\/2022\/04\/42C-Hero-Platform-Audit-P1.png\" target=\"_self\" itemprop=\"url\" rel=\"noopener\">\n\t\t\t\t<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/staging2022.42crunch.com\/wp-content\/uploads\/2022\/04\/42C-Hero-Platform-Audit-P1-1024x535.png\" alt=\"42C-Hero-Platform-Audit-P1\" itemprop=\"image\" height=\"535\" width=\"1024\" title=\"42C-Hero-Platform-Audit-P1\" onerror=\"this.style.display='none'\"  \/>\n\t\t\t\t<\/a>\n\t<p>API Audit\u00a0provides instant security scoring for prioritization and remediation advice at design-time to help developers to define and build the best OpenAPI contract possible. It performs over 300+ security checks on your OpenAPI contract, ranging from the structure and semantics to the security and input\/output data definitions. The API security audit\u00a0is a core shift-left element of our <a href=\"https:\/\/staging2022.42crunch.com\/api-security-platform\/\">API Security Platform<\/a>.<\/p>\n\t<iframe src=\"https:\/\/player.vimeo.com\/video\/873235173?badge=0&amp;autopause=0&amp;player_id=0&amp;app_id=58479\" frameborder=\"0\" allowfullscreen=\"allowfullscreen\"><\/iframe>\n<h2>\n\t\tThree-Tier Security Audit\n\t<\/h2>\n\t<p>API Audit &amp; Linter reviews your OpenAPI definition file on three levels:<\/p>\n<ul>\n<li>It assesses if your API is a valid and well-formed\u00a0OpenAPI file that adheres to the OpenAPI Specification (OAS).<\/li>\n<li>It reviews the security definitions in your API, if you have defined authentication and authorization methods and if the protocol is secure.<\/li>\n<li>It assesses the data definition quality of your API and how strong are the schemas defined for your API and its parameters.<\/li>\n<\/ul>\n\n\t\t\t\t<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/staging2022.42crunch.com\/wp-content\/uploads\/2022\/08\/API-Audit-Infographic-P1-04-1024x1010.png\" alt=\"API Audit Infographic P1-04\" itemprop=\"image\" height=\"1010\" width=\"1024\" title=\"API Audit Infographic P1-04\" onerror=\"this.style.display='none'\"  \/>\n\n\t\t\t\t<a href=\"https:\/\/staging2022.42crunch.com\/wp-content\/uploads\/2022\/07\/42C_UI_8_22-13.png\" target=\"_self\" itemprop=\"url\" rel=\"noopener\">\n\t\t\t\t<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/staging2022.42crunch.com\/wp-content\/uploads\/2022\/07\/42C_UI_8_22-13-1024x560.png\" alt=\"42C_UI_8_22-13\" itemprop=\"image\" height=\"560\" width=\"1024\" title=\"42C_UI_8_22-13\" onerror=\"this.style.display='none'\"  \/>\n\t\t\t\t<\/a>\n<h2>\n\t\tHelp Developers Focus on the security gaps that matter\n\t<\/h2>\n\t<p>The starting point for an API&#8217;s security is the OpenAPI definition itself. API Audit helps you lock down the OpenAPI definition at design time, to reduce the attack surface and remove any potential security gaps. Let your developers focus on the problems that matter and avoid the noise.<\/p>\n<h2>\n\t\tDevelopers get instant scoring to make fixes inside their IDE and CI\/CD pipelines\n\t<\/h2>\n\t<p>API Audit automatically performs an analysis of your API definition with 300+ checks for instant security scoring for prioritization and remediation advice. Developers can build the best OpenAPI contract possible from inside their favorite <a href=\"https:\/\/staging2022.42crunch.com\/ide-api-integrations\/\">IDE<\/a> and <a href=\"https:\/\/staging2022.42crunch.com\/cicd-api-integrations\/\">CI\/CD<\/a> pipeline.<\/p>\n\n\t\t\t\t<a href=\"https:\/\/staging2022.42crunch.com\/wp-content\/uploads\/2022\/07\/42C_UI_8_22_Security_Audit_1.png\" target=\"_self\" itemprop=\"url\" rel=\"noopener\">\n\t\t\t\t<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/staging2022.42crunch.com\/wp-content\/uploads\/2022\/07\/42C_UI_8_22_Security_Audit_1-1024x560.png\" alt=\"42C_UI_8_22_Security_Audit_1\" itemprop=\"image\" height=\"560\" width=\"1024\" title=\"42C_UI_8_22_Security_Audit_1\" onerror=\"this.style.display='none'\"  \/>\n\t\t\t\t<\/a>\n\t\t\t\t<a href=\"https:\/\/staging2022.42crunch.com\/wp-content\/uploads\/2022\/07\/42C_UI_8_22_Scan-08.png\" target=\"_self\" itemprop=\"url\" rel=\"noopener\">\n\t\t\t\t<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/staging2022.42crunch.com\/wp-content\/uploads\/2022\/07\/42C_UI_8_22_Scan-08-1024x560.png\" alt=\"42C_UI_8_22_Scan-08\" itemprop=\"image\" height=\"560\" width=\"1024\" title=\"42C_UI_8_22_Scan-08\" onerror=\"this.style.display='none'\"  \/>\n\t\t\t\t<\/a>\n<h2>\n\t\tDiscover which APIs are vulnerable before they are deployed\n\t<\/h2>\n\t<p>Security Audit can automatically discover your API definitions by crawling code repositories and reporting all the OpenAPI\/Swagger files. You instantly get a view of all your APIs and their security health.<\/p>\n<h2>\n\t\tSecurity Governance and Enterprise Compliance\n\t<\/h2>\n\t<p>Keep your APIs compliant with visibility at design and runtime. Security teams can define minimal audit scores,\u00a0 maximum criticality of the issues found by Security Audit and even drill down at issue level (for example, block all APIs which are using API keys as their authentication theme or do not have proper patterns defined for request parameters).<\/p>\n<p>The OpenAPI contract can also be audited from the <a href=\"https:\/\/staging2022.42crunch.com\/cicd-api-integrations\/\">CI\/CD<\/a> to ensure it is of sufficient quality to pass security requirements. In addition, security teams can overlay security policies to enhance the OpenAPI contract, which can then be enforced by the <a href=\"https:\/\/staging2022.42crunch.com\/micro-api-firewall-protection\/\">API Protect micro firewall<\/a>.<\/p>\n\t\t\t\t<a href=\"https:\/\/staging2022.42crunch.com\/wp-content\/uploads\/2022\/07\/42C_UI_8_22_Dashboard_Map.png\" target=\"_self\" itemprop=\"url\" rel=\"noopener\">\n\t\t\t\t<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/staging2022.42crunch.com\/wp-content\/uploads\/2022\/07\/42C_UI_8_22_Dashboard_Map-1024x560.png\" alt=\"42C_UI_8_22_Dashboard_Map\" itemprop=\"image\" height=\"560\" width=\"1024\" title=\"42C_UI_8_22_Dashboard_Map\" onerror=\"this.style.display='none'\"  \/>\n\t\t\t\t<\/a>\n\t\t\t\t<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/staging2022.42crunch.com\/wp-content\/uploads\/2022\/08\/42Crunch-Quotes-White.png\" alt=\"42Crunch-Quotes-White\" itemprop=\"image\" height=\"501\" width=\"469\" title=\"42Crunch-Quotes-White\" onerror=\"this.style.display='none'\"  \/>\n<h2>\n\t\t<a href=\"https:\/\/staging2022.42crunch.com\/omdia-next-generation-application-security-radar-report\/\" title=\"42Crunch&#039;s ability to secure both the CI\/CD pipeline &amp; the runtime environment makes it a compelling candidate for any API security project.\" target=\"_self\" rel=\"noopener\">\n\t\t42Crunch&#8217;s ability to secure both the CI\/CD pipeline &#038; the runtime environment makes it a compelling candidate for any API security project.\n\t\t<\/a>\n\t<\/h2>\n\t<p>Rik Turner<\/p>\n\t<p>Principal Analyst, OMDIA<\/p>\n\t\t\t\t<a href=\"https:\/\/staging2022.42crunch.com\/omdia-next-generation-application-security-radar-report\/\" target=\"_self\" itemprop=\"url\" rel=\"noopener\">\n\t\t\t\t<img decoding=\"async\" src=\"https:\/\/staging2022.42crunch.com\/wp-content\/uploads\/2022\/04\/Report-Mockups-2-Omdia-1024x945.png\" alt=\"Report-Mockups-2-Omdia\" title=\"Report-Mockups-2-Omdia\" itemprop=\"image\"  \/>\n\t\t\t\t\t\t<\/a>\n<h2>\n\t\tReady to Learn More?\n\t<\/h2>\n\t<p>Developer-first solution for delivering API security as code.<\/p>\n\t\t\t<a href=\"https:\/\/staging2022.42crunch.com\/get-started\/\" target=\"_self\" rel=\"noopener\">\n\t\t\t\t\t\t\tGet Started\n\t\t\t\t\t<\/a>\n\n","protected":false},"excerpt":{"rendered":"<p>API Audit Optimize your API security at design time Free Online Audit Tool API Audit\u00a0provides instant security scoring for prioritization and remediation advice at design-time to help developers to define and build the best OpenAPI contract possible. It performs over 300+ security checks on your OpenAPI contract, ranging from the structure and semantics to the [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_seopress_robots_primary_cat":"","_seopress_titles_title":"API Audit | OpenAPI contract Security Audit &amp; Linter","_seopress_titles_desc":"API Audit performs over 300+ checks on your OpenAPI definition file and provides instant security scoring for prioritization and remediation advice.","_seopress_robots_index":"","site-sidebar-layout":"no-sidebar","site-content-layout":"page-builder","ast-site-content-layout":"","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"disabled","ast-hfb-above-header-display":"disabled","ast-hfb-below-header-display":"disabled","ast-hfb-mobile-header-display":"disabled","site-post-title":"disabled","ast-breadcrumbs-content":"disabled","ast-featured-img":"disabled","footer-sml-layout":"disabled","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""}},"footnotes":""},"_links":{"self":[{"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/pages\/189"}],"collection":[{"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/comments?post=189"}],"version-history":[{"count":2,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/pages\/189\/revisions"}],"predecessor-version":[{"id":18401,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/pages\/189\/revisions\/18401"}],"wp:attachment":[{"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/media?parent=189"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}