Security News > 2023 > December > How AI is revolutionizing “shift left” testing in API security

Automated API security testing predominantly uses tools from two application security methodologies: static application security testing and dynamic application security testing.
API security testing is increasingly being integrated into the API security offering, translating into much more efficient processes, such as automatically associating appropriate APIs with suitable test cases.
API security testing poses a more complex problem because APIs are based on various technologies, business functions, and other factors.
API security testing adoption can be expedited by automating the manual associate test cases for API endpoints.
A security analyst might, for example, state, "Generate a test plan for my Payments API to ensure PCI data compliance" via an AI-enabled API security tool, avoiding the need to input the query or the detailed test plan.
Crucially, it builds upon recent advances in integrating of API security testing within API security tools, meaning the sector no longer needs to rely purely on SAST/DAST tooling.
News URL
https://www.helpnetsecurity.com/2023/12/05/api-security-testing/
Related news
- April 2025 Patch Tuesday forecast: More AI security introduced by Microsoft (source)
- How to find out if your AI vendor is a security risk (source)
- Network Security at the Edge for AI-ready Enterprise (source)
- One in three security teams trust AI to act autonomously (source)
- Coaching AI agents: Why your next security hire might be an algorithm (source)
- Why security teams cannot rely solely on AI guardrails (source)
- AI forces security leaders to rethink hybrid cloud strategies (source)
- LlamaFirewall: Open-source framework to detect and mitigate AI centric security risks (source)
- Woodpecker: Open-source red teaming for AI, Kubernetes, APIs (source)