From the 2MNY engineering team

#Envoy

All security articles tagged "Envoy" — vulnerability deep-dives, scanner guides and hardening checklists from the 2MNY team.

← All articles

All AI & LLM Security 1 API Security 2 Attack Surface 3 DNS Security 2 HTTP Headers 1 Monitoring 2 OWASP 4 Product Updates 6 Small Business 1 SSL/TLS 1 Supply Chain Security 2 Threat Intelligence 2 Website Security 7 WordPress Security 1

API Security

API Gateway Admin Planes: One GET Away From Total Takeover

An API gateway sits in front of everything and holds the keys to all of it: routes, upstream services, API keys, rate limits. When its admin plane answers an unauthenticated GET on a management port, attackers read your entire routing table — and on several gateways, rewrite it. Here's the 15-probe matrix we run and what each exposed plane really means.

2MNY Admin • Oct 13, 2026 • 4 min read

Put the reading to work

Run a free scan and see which of the issues we write about are live on your website right now.

Start Free Scan