I will test your API security for rest and graphql apis

APIs are where modern applications break. Broken access control and weak authentication quietly expose customer data, and most teams only find out after an incident. I test your API the way an attacker would, and I show you exactly what to fix.

I lead Application Security and VAPT as SVP at a major bank, with over 13 years in cybersecurity and bug bounty hunting, a HackerOne Top 100 ranking for three consecutive years and certifications including eCPPT, CRTP and eWPTXv2. API testing for banking systems is my daily work.

What you get: testing based on the OWASP API Security Top 10, covering broken object level authorisation, authentication flaws, excessive data exposure, rate limiting and business logic abuse.

 Every finding includes proof, severity and remediation guidance your developers can use right away. Standard and Premium include a retest.

You must own the API or hold written authorisation to test it. Message me before ordering with your API type and documentation format, and I will confirm scope and package.