API testing

[Venkata Subrahmanyam]

Hello guys,

I have been onboarding API modules, authenticating them and running scans through OpenAPI files but I see most of the scans on them are web security scan rules and not completely related to API security as such. Is there anything along those being developed or something that has to be developed in-store?

Just a curious soul!

Thank you, 

Venkat

Virus-free. www.avast.com

This mail is governed by the Disclaimer Terms of  SIU which may be viewed at http://siu.edu.in/disclaimer.php

[psiinon]

Hi Venkat,

What sort of rules are you looking for? What do you think we should be testing for?

ZAP is a community project, requesting new / improved rules is one way you can contribute :)

Cheers,

Simon