The OWASP API project addresses modern threats for API based applications.While traditional vulnerabilities like SQLi, CSRF, and XSS are becoming less common in APIs, there’s been an increase in vulnerabilities that are either specific to APIs or present a bigger risk, which many developers are unaware of.The presentation talks about:- The OWASP API Security Project- OWASP top 10 for APIs - including recent examples - Tools for security engineers to perform pentest for APIs- Tips for developers on how to develop more secure API