World Congress 2025 • Aug 20, 2025 • Session details

Bullet-Proof APIs: The OWASP API Security Top Ten

Are your APIs bleeding data through mass assignment or faulty authorization? Master the OWASP Top Ten to embed bullet-proof defense mechanisms directly into your architecture.

Bullet-Proof APIs: The OWASP API Security Top Ten thumbnail

Checking access…

Playback and chapters load privately for Free videos.

Matching moments

2:07 min

Identifying core risks with the OWASP top ten

Ramona Schwering

Ramona Schwering · LIVE

3:48 min

Securing applications and networks against common API vulnerabilities

Rustam Mehmandarov

Rustam Mehmandarov · World Congress 2026 North America

6:11 min

Overview of the 2025 OWASP Top Ten list

Christian Wenz

Christian Wenz · World Congress 2026 Europe

2:51 min

Evaluating agentic API risks with OWASP top ten

Phani Pendurthi

Phani Pendurthi · World Congress 2026 North America

12:11 min

Identifying and mitigating top software vulnerability classes

Thomas Konrad · World Congress 2021

3:15 min

The current state of enterprise APIs and security trends

Pratim Bhosale

Pratim Bhosale · World Congress 2025

More from World Congress 2025

GenAI Security: Navigating the Unseen Iceberg thumbnail

about 1 year ago

GenAI Security: Navigating the Unseen Iceberg

Maish Saidel-Keesing

Behind the Code: How Women Are Powering the Future of AI thumbnail

about 1 year ago

Behind the Code: How Women Are Powering the Future of AI

Alexandra Wudel, Laura Moritz, Madalina Florean

The AI Hype Filter: What’s Real, What’s Investable, What’s Noise? thumbnail

about 1 year ago

The AI Hype Filter: What’s Real, What’s Investable, What’s Noise?

Justus Lumpe, Konstantin Vinogradov, Nils Eiteneyer, Stephan Wirris

AI in Leadership: How Technology is Reshaping Executive Roles thumbnail

about 1 year ago

AI in Leadership: How Technology is Reshaping Executive Roles

Bernd Datler, Jasmin Kaiser, Jeff Hausmann, Sonja Alvarez

The AI-Ready Stack: Rethinking the Engineering Org of the Future thumbnail

about 1 year ago

The AI-Ready Stack: Rethinking the Engineering Org of the Future

Alex Laubscher, Jan Oberhauser, Keno Dreßel, Mirko Novakovic

AI Sovereignty: What Does It Take? thumbnail

about 1 year ago

AI Sovereignty: What Does It Take?

Boris Hecker, Clemens Wasner, Robin Hermann, Sonja Alvarez

Upcoming sessions on this topic

How We Cut Our API's p99 Latency from Minutes to Under a Second

Deepak Agrawal

Atlassian

Principal Software Engineer

Supply Chain Security for the Everyday Engineer

Pradumna Saraf

Kestra Technologies

Quality Assurance Engineer

Shipping MCP to Real Users: Scaling, Auth, and the PII Leak You Didn't See Coming

Hadar Geva

Myop

CTO & Co-founder

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

Vikram Vaswani

Consultant

How Google built a Consistent, Global Authorization System with Zanzibar (and you can too!)

Sohan Maheshwar

AuthZed

Lead Developer Advocate

What I Got Wrong Shipping an MCP Server for Live Infrastructure

Pritesh Kiri

Harness

Developer Relations Engineer

Related videos

Bulletproof Web Applications: The 2025 OWASP Top Ten thumbnail

World Congress 2026 Europe • 4 months ago

Bulletproof Web Applications: The 2025 OWASP Top Ten

Christian Wenz

Architecting API Security thumbnail

LIVE • over 4 years ago

Architecting API Security

Philippe De Ryck

Lessons learned from observing a billion API requests thumbnail

World Congress 2025 • about 1 year ago

Lessons learned from observing a billion API requests

Pratim Bhosale

Security in modern Web Applications - OWASP to the rescue! thumbnail

World Congress 2023 • about 3 years ago

Security in modern Web Applications - OWASP to the rescue!

Jakub Andrzejewski

API = Some REST and HTTP, right? RIGHT?! thumbnail

World Congress 2026 North America • about 1 month ago

API = Some REST and HTTP, right? RIGHT?!

Rustam Mehmandarov

An Opinionated Guide to Bulletproof APIs thumbnail

World Congress 2026 Europe • 4 months ago

An Opinionated Guide to Bulletproof APIs

Rustam Mehmandarov

Related articles

DC

Daniel Cranney

Understanding and Mitigating Common Web Vulnerabilities

Vulnerabilities exist in many forms on the web, and attackers continue to find creative ways to exploit them. Technological advances like the proliferation of AI are of course exciting nd filled wi...

over 1 year ago

An image with neon lighting featuring a globe and a padlock

HS

Harman Singh

11 Best Practices For PHP Security

PHP is one of the most popular programming languages in use today. It is used by millions of websites, including some of the biggest names on the internet. While PHP is a very powerful language, it...

over 4 years ago

11 Best Practices For PHP Security

BB

Benedikt Bischof

Walking Into The Era of Supply Chain Risks

Welcome to this issue of the WeAreDevelopers Live Talk series. This article recaps an interesting talk by Vandana Verma who introduced the audience interesting topic of supply chain risks.About the...

over 4 years ago

Walking Into The Era of Supply Chain Risks

DC

Daniel Cranney

The Overflow: Security and Privacy

Every week we dig through hundreds of links from all over the web, and it’s often hard for developers keep up. So, we thought we’d put together some links we couldn’t fit in the Dev Digest in what ...

8 months ago

From learning to earning

Jobs that call for the skills explored in this talk.

about 1 month ago • Verified

Senior Product Security Architect

Austin, United States

Expert Remote Agentic AI Security Architecture

Forward Deployed Software Engineering - Senior Manager

Boston, MA, United States

Expert $124k–335k Code Review Api Management Software Systems

Staff Developer Advocate, GitHub Security Lab

Experienced $121k–323k Remote Git Github Databases

Staff Developer Advocate, GitHub Security Lab

San Francisco, CA, United States

Experienced $323k Git Github Databases

Senior Software Engineer, Identity Platform

San Francisco, CA, United States

Expert $329k Ruby OAuth Golang

Forward Deployed Software Engineering - Senior Manager

Chicago, IL, United States

Expert $124k–335k Code Review Api Management Software Systems