API Security Courses and Certifications

Okta

Kong API Gateway Integration with Okta OIDC Authentication

Integrate Kong API gateway with Okta OIDC for seamless authentication, eliminating the need for your application to manage OIDC flows directly.

• YouTube
• 22 minutes
• On-Demand
• Free Video

OWASP Foundation

Automating API Penetration Testing Using Fuzzapi

Explore automated API penetration testing with fuzzapi, addressing common vulnerabilities in REST APIs. Learn to integrate security testing into development pipelines for early detection and mitigation.

• YouTube
• 46 minutes
• On-Demand
• Free Video

NahamSec

This CTF Teaches You Everything About Hacking an API

Dive into a comprehensive guide to API hacking through a hands-on CTF, covering authentication vulnerabilities, information disclosure, privilege escalation, and automation techniques for effective API security testing.

• YouTube
• 19 minutes
• On-Demand
• Free Video

DEFCONConference

Vulnerabilities in Global Transportation Payment Systems - Security Risks and Exploits

Uncover critical security vulnerabilities in public transportation payment systems, focusing on Moovit's API weaknesses, unauthorized access risks, and solutions for protecting user data and preventing payment fraud.

• YouTube
• 34 minutes
• On-Demand
• Free Video

OWASP API Security Top 10 Course – Secure Your Web Apps

1 review

Comprehensive guide to OWASP API Security Top 10 2023, covering key risks, fortification techniques, and additional concepts for securing web applications and APIs effectively.

• freeCodeCamp
• 1-2 hours
• On-Demand
• Free Video

Discover how to configure OAuth 2.0 workflows in IBM Security Verify Access, including authorization code, implicit grant, and resource owner password credentials for API protection.

• IBM Training
• 1 hour
• On-Demand
• Free Online Course

API Platform 3 Part 2: Security for your Treasures

Secure your API Platform-powered API with authentication, authorization, and advanced security features. Learn testing, custom fields, validation, and automatic filtering techniques.

• SymfonyCasts
• 3 hours 43 minutes
• On-Demand
• Paid Course

Comprehensive overview of OWASP API Security Top 10, covering key vulnerabilities and mitigation strategies. Ideal for software engineers seeking to enhance API security knowledge and practices.

• Cybrary
• 1-2 hours
• On-Demand
• Paid Course

API Security on Google Cloud's Apigee API Platform

Learn to secure APIs on Google Cloud's Apigee platform. Covers OAuth, JWTs, federated security, threat protection, and data masking. Hands-on labs reinforce concepts for effective API security implementation.

• Google Skills
• 1 day
• On-Demand
• Paid Course

DevSecOps Course for Beginners - API Security

Master DevSecOps fundamentals and API security by integrating security throughout the software development lifecycle, from planning to deployment.

• freeCodeCamp
• 2 hours 3 minutes
• On-Demand
• Free Video

API Key Authentication & Security

Discover secure API key authentication implementation alongside OAuth systems, covering generation, validation, middleware integration, and rate limiting with hands-on Python examples.

• CodeSignal
• 1 hour
• On-Demand
• Free Certificate

NahamSec

CTF Walkthrough- Hacking An API with Snyk

Detailed walkthrough of API hacking in a Capture The Flag challenge, demonstrating practical offensive security techniques and vulnerability exploitation.

• YouTube
• 11 minutes
• On-Demand
• Free Video

LASCON

How to Hack an API in 15 Minutes

Discover how hackers exploit Shadow APIs to extract large volumes of data quickly. Learn about this basic yet non-obvious security vulnerability and creative methods used by attackers.

• YouTube
• 48 minutes
• On-Demand
• Free Video

OWASP Foundation

vAPI: Vulnerable Adversely Programmed Interface - OWASP API Top 10

Explore and exploit API vulnerabilities using vAPI, a lab environment mimicking OWASP API Top 10 scenarios. Ideal for developers and penetration testers to understand and address common API security issues.

• YouTube
• 23 minutes
• On-Demand
• Free Video

OWASP Foundation

The API Assessment Primer

Learn essential API security assessment techniques, including key considerations, testing steps, and best practices for protecting APIs and mobile applications from common vulnerabilities and threats.

• YouTube
• 39 minutes
• On-Demand
• Free Video