API Security Articles — LazyHackers

back to API Security

Gateway & Webhooks

API Security → Gateway & Webhooks

API Security Members

May 31, 2026

A "proper" REST API returns the links telling the client what it can do next. That is HATEOAS, and it quietly turns the response i…

16m

API Security Members

May 30, 2026

Webhooks are event callbacks over HTTP — and every one is an unauthenticated POST that a bad actor can forge, replay, or point at …

16m

API Security Members

May 30, 2026

The gateway in front of your APIs — Kong, AWS API Gateway, Apigee, NGINX, Envoy — is a security control and an attack surface at o…

16m