Vulnerabilities in Production APIs and Open Source Security

“API” stands for Application Programming Interface. An Application Programming Interface is a set of related functions or named entry points into software used by programmers to allow software applications to issue specific calls to communicate with an operating system1.
Application Programming Interface

Of an uninterrupted nature, APIs are seamless services that link different services together using a set of definitions and protocols. As one could imagine, the use of APIs has increased significantly. According to Salt Security, the number of API calls increased by 82% year-over-year in 2022 connecting people to more services than ever before. Salt Security customer data shows the average number of APIs per customer grew 82% over last year, up from 89% in July 2021 to more than 162% in July 2022.

What is Open Source Security and Why Does it Matter?

Commonly referred to as Software Composition Analysis (SCA), Open Source Security is a methodology providing users better visibility into the Open Source inventory of their applications3. This is achieved by examining components via binary fingerprints, utilizing professionally curated and proprietary research, matching accurate scans against that proprietary intelligence as well as demonstrating and verifying for software developers that proprietary intelligence inside their favourite tools. Furthermore, Open Source Security refers to the measure of assurance or guarantee in the freedom from danger and risk inherent to an Open Source Software system.

Read on to understand what can be done to address vulnerabilities. 

Sign up to receive updates and newsletters from Kobalt.io