Resources
API-Security
OWASP/API-Security
The OWASP API Security Top 10 project, documenting the most common API security risks and best practices for building, testing and defending APIs.
Topics
Related projects
API-Security-Checklist23.4kA checklist of essential API security countermeasures for designing, testing, and releasing secure APIs.
express-rate-limit3.3kexpress-rate-limit is a rate-limiting middleware for the Express web server, limiting repeated requests by IP over a time window and supporting external stores and standard rate-limit headers.
horus1.2kAn all-in-one Python investigation toolkit bundling OSINT lookups, forensics, crypto, and location utilities behind an interactive command console.
fizz-gateway-node1.1kFizzGate is a Java API aggregation gateway offering API management, orchestration, masking, security, and tracing, plus an LLM gateway with multi-provider routing and MCP support.
public-apis498.5kA community-curated directory of free public APIs and MCP servers organized by category for discovery.
CheatSheetSeries34kThe official OWASP Cheat Sheet Series, a concise collection of high-value application security guidance and best practices organized by topic.