On-demandCybersecurity CISO Series
The unveiling of API security myths.
The API security assumptions that no longer hold once cloud-native, zero-trust, and containerization land in production.
7 Apr 202160 min
Presented by
About this talk
Satyam Gothi, Security Consultant at SecureLayer7, walked teams through the API security assumptions worth questioning in 2021 and beyond. This is the recording.
API traffic is now the majority of enterprise traffic, and attackers know it. Traditional WAFs, perimeter controls, and gateway authentication were never designed for the volume, schema sprawl, and lifecycle velocity of modern APIs.
The session covers how cloud, zero-trust, containerization, and shift-left actually change the API threat model, whether legacy controls are enough, why a full-lifecycle approach beats point solutions, and what to look for in dedicated API security tooling.
Related topics