APIs now carry more transaction volume than the interfaces built on top of them, which makes them a priority target — and a common gap in traditional web testing. Go2Duo tests REST and SOAP APIs against the OWASP API Security Top 10: broken object-level authorization, excessive data exposure, weak rate limiting and injection flaws. Testing covers authentication mechanisms, input validation and access control between API consumers, with findings mapped directly to the endpoints and parameters affected.
