Web service scanning

Critical tests:

  • API authentication/authorization

  • Input validation

  • Rate limiting

  • Data exposure

Tools:

  • Postman + Newman

  • OWASP ZAP

  • Burp Suite

Last update: 2025-05-12 14:39