WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2025 • Aug 20, 2025 • Session details

Lessons learned from observing a billion API requests

Pratim Bhosale

An analysis of a billion API requests reveals a shocking vulnerability: nearly half lack basic authentication. Learn to secure your architecture and prepare your endpoints for AI consumers.

Pause
Mute Enter Fullscreen
#1 about 4 min

The current state of enterprise APIs and security trends

The explosive growth of internal APIs reveals critical vulnerabilities like the lack of basic authentication.

#2 about 3 min

Security comparisons across web frameworks and development languages

Opinionated architectural frameworks provide robust default security environments compared to generic router libraries.

#3 about 5 min

Understanding the four core pillars of API scoring

Evaluating API quality requires measuring design standards, performance characteristics, internal security measures, and AI readiness.

#4 about 5 min

Improving API scores through practical OpenAPI specification audits

Reviewing production OpenAPI documents reveals that explicit HTTP response codes and rich metadata dramatically improve compliance.

#5 about 2 min

Optimising operation IDs and documentation for AI consumers

Defining descriptive operation IDs and extensive examples allows large language models to accurately implement programmatic SDKs.

#6 about 3 min

Implementing application-level security and masking sensitive responses

Embedding rate limit logic directly into services mitigates automated agent scraping while protecting sensitive user data.

#7 about 2 min

Achieving full traceability for API observability and debugging

Tracking granular service communication is essential for debugging unexpected interactions triggered by third-party data consumers.

#8 about 2 min

Designing use-case driven APIs and consolidating broad endpoints

Structuring endpoints around specific business requirements instead of database schemas mitigates sprawl and simplifies version control.

#9 about 3 min

Building composable interfaces and data sources for agents

Exposing structured and predictably versioned endpoints transforms standard APIs into native training sources for autonomous frameworks.

Matching moments

9:56 min

Final code walk-through and audience Q&A session

Germán Álvarez · LIVE

1:40 min

Summarizing key engineering lessons for platform API development

Anto Anto · WWC 2024

2:00 min

Key architectural takeaways for building secure APIs

Philippe De Ryck · LIVE

3:26 min

Designing APIs for security from day one

Philippe De Ryck · LIVE

11:18 min

Addressing audience questions on security and microservice architectures

Reinhard Kugler · LIVE

2:04 min

Clarifying API technologies and future scope

Simon Auer Simon Auer · WWC 2025

More from World Congress 2025

GenAI Security: Navigating the Unseen Iceberg thumbnail
24:33
10 months ago

GenAI Security: Navigating the Unseen Iceberg

Maish Saidel-Keesing

Behind the Code: How Women Are Powering the Future of AI thumbnail
30:28
12 months ago

Behind the Code: How Women Are Powering the Future of AI

Alexandra Wudel, Laura Moritz, Madalina Florean

The AI Hype Filter: What’s Real, What’s Investable, What’s Noise? thumbnail
28:12
12 months ago

The AI Hype Filter: What’s Real, What’s Investable, What’s Noise?

Justus Lumpe, Konstantin Vinogradov, Nils Eiteneyer, Stephan Wirris

AI in Leadership: How Technology is Reshaping Executive Roles thumbnail
28:19
12 months ago

AI in Leadership: How Technology is Reshaping Executive Roles

Bernd Datler, Jasmin Kaiser, Jeff Hausmann, Sonja Alvarez

The AI-Ready Stack: Rethinking the Engineering Org of the Future thumbnail
28:09
12 months ago

The AI-Ready Stack: Rethinking the Engineering Org of the Future

Alex Laubscher, Jan Oberhauser, Keno Dreßel, Mirko Novakovic

AI Sovereignty: What Does It Take? thumbnail
29:13
12 months ago

AI Sovereignty: What Does It Take?

Boris Hecker, Clemens Wasner, Robin Hermann, Sonja Alvarez

Upcoming sessions on this topic

Open session

World Congress 2026 North America

Designing APIs That Survive AI Agents at Scale

Phani Pendurthi

Mastercard, Principal Software Engineer

Phani Pendurthi
Open session

World Congress 2026 North America

API = Some REST and HTTP, right? RIGHT?!

Rustam Mehmandarov

Passionate computer scientist

Rustam Mehmandarov
Open session

World Congress 2026 North America

AI-Driven API Design

Mike Amundsen

Author, Adviser, Trainer

Mike Amundsen
Open session

World Congress 2026 North America

The Things Your AI Isn't Telling You

Desmond Lamptey

Lead Software Engineer @ Capital One

Desmond Lamptey
Open session

World Congress 2026 North America

Securing AI Agent Infrastructure: Identity, Attestation, and Trust at Scale

Abdel Fane

Founder of OpenA2A

Abdel Fane
Open session

World Congress 2026 North America

Optimizing consumption and cost of AI APIs in the enterprise

Derric Gilling

Vice President and General Manager, API Platform

Derric Gilling

Related videos

An Opinionated Guide to Bulletproof APIs thumbnail
27:13
WWC Europe 2026 • about 1 month ago

An Opinionated Guide to Bulletproof APIs

Rustam Mehmandarov

Architecting API Security thumbnail
47:34
LIVE • over 4 years ago

Architecting API Security

Philippe De Ryck

Lessons from Our API Past: Evolving to a Resilient API Future thumbnail
29:30
WWC 2025 • 12 months ago

Lessons from Our API Past: Evolving to a Resilient API Future

Yousaf Nabi

Bullet-Proof APIs: The OWASP API Security Top Ten thumbnail
25:46
WWC 2025 • 12 months ago

Bullet-Proof APIs: The OWASP API Security Top Ten

Christian Wenz

For the REST of us: API First and Conway’s Law thumbnail
21:29
Europe 2026 Virtual • about 1 month ago

For the REST of us: API First and Conway’s Law

Michael Jaeger

API = Some REST and HTTP, right? RIGHT?! thumbnail
27:25
WWC 2025 • 12 months ago

API = Some REST and HTTP, right? RIGHT?!

Rustam Mehmandarov

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.