From the 2MNY engineering team

API Security Articles

Articles about API Security.

All AI & LLM Security 1 API Security 2 Attack Surface 3 DNS Security 2 HTTP Headers 1 Monitoring 2 OWASP 4 Product Updates 6 Small Business 1 SSL/TLS 1 Supply Chain Security 2 Threat Intelligence 2 Website Security 7 WordPress Security 1

API Security

API Gateway Admin Planes: One GET Away From Total Takeover

An API gateway sits in front of everything and holds the keys to all of it: routes, upstream services, API keys, rate limits. When its admin plane answers an unauthenticated GET on a management port, attackers read your entire routing table — and on several gateways, rewrite it. Here's the 15-probe matrix we run and what each exposed plane really means.

2MNY Admin • Oct 13, 2026 • 4 min read

API Security

API Security Testing Checklist: Shadow APIs, Verb Gaps, GraphQL and gRPC

APIs now carry more sensitive traffic than the websites in front of them. This testing checklist covers shadow APIs, verb gaps, GraphQL and gRPC exposure, and broken authorization.

2MNY Admin • Oct 11, 2026 • 5 min read

Put the reading to work

Run a free scan and see which of the issues we write about are live on your website right now.

Start Free Scan