> Markdown version of [/events/world-congress-2025/sessions/496-bullet-proof-apis](https://www.wearedevelopers.com/events/world-congress-2025/sessions/496-bullet-proof-apis). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Bullet-Proof APIs: The OWASP API Security Top Ten


- **Date:** Thursday, Jul 10, 2025
- **Time:** 10:10–10:40 (30 min)
- **Room:** Stage 4
- **Event:** World Congress 2025
- **Tags:** compliance, cybersecurity, privacy

## Recording

[Watch recording](https://www.wearedevelopers.com/videos/1557-bullet-proof-apis-the-owasp-api-security-top-ten)

## Description

The OWASP Top Ten as a list of the ten biggest security risks for web applications has been a de facto standard for over ten years. Somewhat out of the limelight, however, there are other lists. The OWASP API Security Top Ten was last updated in 2023 and highlights risks for APIs. Since arguably almost every web application relies on APIs these days, it's imperative that we address them. In the talk, we'll take a look at how the list came about and then go through all the points, showcasing common attacks. In particular, we are interested in what this means for modern stacks. Which points are relevant, and how can we take technology-specific countermeasures?

## Speaker

### [Christian Wenz](https://www.wearedevelopers.com/@christian-wenz)

CEO, Actition GmbH


## Related talks at this congress

- [Lessons learned from observing a billion API requests](https://www.wearedevelopers.com/events/world-congress-2025/sessions/845-lessons-learned-from) — Pratim Bhosale
- [Lessons from Our API Past: Evolving to a Resilient API Future](https://www.wearedevelopers.com/events/world-congress-2025/sessions/916-lessons-from-our-api) — Yousaf Nabi
- [Code Red: When Your Tools Turn Against You ](https://www.wearedevelopers.com/events/world-congress-2025/sessions/510-code-red-when-your) — Aaron Bray, Julian Totzek-Hallhuber
- [REST in Peace? What does the API protocol of the future look like? Or do we have it already?](https://www.wearedevelopers.com/events/world-congress-2025/sessions/589-rest-in-peace-what) — Simon Auer