{"id":10142,"date":"2021-06-23T12:03:52","date_gmt":"2021-06-23T12:03:52","guid":{"rendered":"https:\/\/staging-site.42crunch.com\/?p=10142"},"modified":"2022-11-24T09:21:55","modified_gmt":"2022-11-24T09:21:55","slug":"how-to-test-api-security-throughout-the-api-lifecycle-with-postman-and-42crunch","status":"publish","type":"post","link":"https:\/\/staging2022.42crunch.com\/how-to-test-api-security-throughout-the-api-lifecycle-with-postman-and-42crunch\/","title":{"rendered":"How to test API security throughout the API lifecycle with Postman and 42Crunch"},"content":{"rendered":"

Postman, the API collaboration platform for developers, advocates an API-First approach for companies. Using 42Crunch, API developers and application security teams can now implement API security design and testing as part of their API-First approach in Postman.<\/span><\/i><\/p>\n

Kin Lane, chief Evangelist with Postman recently joined Isabelle Mauny, Field CTO at 42Crunch for a webinar<\/span> to demonstrate how enterprises are automating the testing of API security for all their APIs.<\/span><\/p>\n

Watch the webinar now<\/a><\/p>\n

API Explosion: API-Last or API-First?<\/strong><\/h4>\n

Kin pointed out that APIs have come a long way from the mid-90s when businesses such as eBay and Amazon first started to exploit the web using APIs. However, despite the fact that APIs are now everywhere, there is a strong distinction to be drawn between companies who are characterized as API-Last and those who are API-First.\u00a0 Adopting an API-first strategy better prepares a business for the digital revolution impacting every industrial sector today.<\/span><\/p>\n

\"\"<\/p>\n

<\/h4>\n


\nAPI Contracts – OpenAPI and Postman Collections<\/strong><\/h4>\n

\"\"<\/p>\n

Unfortunately the standards of API development vary widely and many are poorly built and left exposed to security vulnerabilities. Central to a successful API strategy is the adherence by the dev<\/span>elopment teams to API contracts which define the documentation of the API that will ultimately be consumed by both internal and external customers. The OpenAPI specification<\/a> and Postman Collections have evolved to assist companies build API contracts that help move APIs forward throughout the API lifecycle.<\/p>\n

<\/h4>\n


\nShift-Left & Shield Right with Security as Code<\/strong><\/h4>\n

Isabelle Mauny expanded on the concept of the API lifecycle and recommended that enterprises adopt a shift-left approach to protecting their APIs by introducing \u201csecurity as code\u201d as early as possible in the API design and development phases. Isabelle demonstrated how easy it is for developers to take control of implementing security as they code using 42 Crunch\u2019s API audit and scan services that are pre-integrated into the developers\u2019 favourite IDEs and CI\/CD environments and now also integrated with Postman. Complementing this shift-left approach, is the 42Crunch API firewall that enforces API security policy at runtime.\u00a0<\/span><\/p>\n

\"\"<\/span><\/p>\n

Watch the webinar now<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Postman, the API collaboration platform for developers, advocates an API-First approach for companies. Using 42Crunch, API developers and application security teams can now implement API security design and testing as part of their API-First approach in Postman. Kin Lane, chief Evangelist with Postman recently joined Isabelle Mauny, Field CTO at 42Crunch for a webinar to […]<\/p>\n","protected":false},"author":6,"featured_media":15318,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"none","_seopress_titles_title":"Test API security with Postman and 42Crunch","_seopress_titles_desc":"How to test API security throughout the API lifecycle with Postman and 42Crunch","_seopress_robots_index":"","site-sidebar-layout":"default","site-content-layout":"default","ast-site-content-layout":"","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"disabled","ast-hfb-above-header-display":"disabled","ast-hfb-below-header-display":"disabled","ast-hfb-mobile-header-display":"disabled","site-post-title":"disabled","ast-breadcrumbs-content":"disabled","ast-featured-img":"disabled","footer-sml-layout":"disabled","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[6],"tags":[],"class_list":["post-10142","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog"],"_links":{"self":[{"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/posts\/10142"}],"collection":[{"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/comments?post=10142"}],"version-history":[{"count":0,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/posts\/10142\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/media\/15318"}],"wp:attachment":[{"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/media?parent=10142"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/categories?post=10142"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/tags?post=10142"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}