World Congress 2025

Lessons learned from observing a billion API requests

July 11, 2025 13:40 – 14:10 · 30 min Stage 5

What this session covers

What if I told you that after studying and analyzing a billion API requests and 15,000 APIs, I found that Javascript APIs are the most insecure APIs? This talk is about learning from data and patterns. We’ll look at: How I processed and analyzed javascript APIs. Some cool database queries. How javascript frameworks rank in API security and design. What is the definition of a good API design? Most common design decisions taken by teams that lead to insecure APIs. What can we learn from other frameworks to build better APIs? Go was mentioned as the most highly used language to build APIs by Cloudflare. We will take a look at the complications that the AI wave has brought in API design and security. For anyone building or managing APIs, this talk will provide a clear look at what’s happening across the API ecosystem and what to do about it.

apis cybersecurity javascript data engineering databases php go

World Congress 2025

Related talks

Open session

API = Some REST and HTTP, right? RIGHT?!

  • Rustam Mehmandarov

    SpareBank 1 Utvikling

    Senior Software Engineer

Open session

Bullet-Proof APIs: The OWASP API Security Top Ten

  • Christian Wenz

    Arrabiata Solutions

    CTO

Open session

Lessons from Our API Past: Evolving to a Resilient API Future

  • Yousaf Nabi

    SmartBear UK

    Developer Advocate

Open session

REST in Peace? What does the API protocol of the future look like? Or do we have it already?

  • Simon Auer

    marqably

    CEO

All sessions at this congress