World Congress 2025

Lessons learned from observing a billion API requests

July 11, 2025 13:40 – 14:10 · 30 min Stage 5
apis cybersecurity javascript data engineering databases php go

What this session covers

What if I told you that after studying and analyzing a billion API requests and 15,000 APIs, I found that Javascript APIs are the most insecure APIs? This talk is about learning from data and patterns. We’ll look at: How I processed and analyzed javascript APIs. Some cool database queries. How javascript frameworks rank in API security and design. What is the definition of a good API design? Most common design decisions taken by teams that lead to insecure APIs. What can we learn from other frameworks to build better APIs? Go was mentioned as the most highly used language to build APIs by Cloudflare. We will take a look at the complications that the AI wave has brought in API design and security. For anyone building or managing APIs, this talk will provide a clear look at what’s happening across the API ecosystem and what to do about it.

Related talks at this congress

Open session

World Congress 2025

July 10, 2025 · 14:50–15:20

Stage 9

API = Some REST and HTTP, right? RIGHT?!

Rustam Mehmandarov

Passionate computer scientist

Rustam Mehmandarov
Open session

World Congress 2025

July 10, 2025 · 10:10–10:40

Stage 4

Bullet-Proof APIs: The OWASP API Security Top Ten

Christian Wenz

CEO, Actition GmbH

Christian Wenz
Open session

World Congress 2025

July 11, 2025 · 16:20–16:50

Stage 1

Lessons from Our API Past: Evolving to a Resilient API Future

Yousaf Nabi

Yousaf, Developer Advocate at SmartBear Software.

Yousaf Nabi
Open session

World Congress 2025

July 10, 2025 · 13:30–14:00

Stage 9

REST in Peace? What does the API protocol of the future look like? Or do we have it already?

Simon Auer

Organizer of flutter vienna meetup and CEO of marqably

Simon Auer
All sessions at this congress