WeAreDevelopers LIVE • Apr 29, 2022

Architecting API Security

Philippe De Ryck

An attacker breaches your API gateway and suddenly gains unchecked access across your trusted network. Prevent catastrophic lateral movement by shifting from perimeter defenses to a zero-trust architecture.

Architecting API Security thumbnail

Checking access…

Playback and chapters load privately for Free videos.

Matching moments

3:48 min

Securing applications and networks against common API vulnerabilities

Rustam Mehmandarov

Rustam Mehmandarov · World Congress 2026 North America

6:44 min

Designing a resilient API gateway architecture

Lars Hesel Christensen +1 · LIVE

3:15 min

The current state of enterprise APIs and security trends

Pratim Bhosale

Pratim Bhosale · World Congress 2025

9:56 min

Final code walk-through and audience Q&A session

Germán Álvarez · LIVE

1:36 min

Securing exposed application programming interfaces against unauthenticated access

Jasmin Azemović

Jasmin Azemović · World Congress 2023

2:31 min

Addressing insecure design through early threat modeling

Christian Wenz

Christian Wenz · World Congress 2026 Europe

More from WeAreDevelopers LIVE

Humans in the Loop: Storytelling in Tech thumbnail

Humans in the Loop: Storytelling in Tech

Christian Heilmann +2

4 days ago

WeAreDevelopers LIVE: Your Brain Is Lying to You: Cognitive Biases in Development thumbnail

Your Brain Is Lying to You: Cognitive Biases in Development

Last week

Like Peas in a Pod - What Happens When People Clone Your App? thumbnail

Like Peas in a Pod - What Happens When People Clone Your App?

Ivan Kutskir +2

2 weeks ago

WeAreDevelopers LIVE - Read more, Prompt Less thumbnail

Read more, Prompt Less

Christian Heilmann +2

3 weeks ago

WeAreDevelopers LIVE - Tech Education in Two Languages thumbnail

Tech Education in Two Languages

Daniel Cranney +1

Oct 2026

WeAreDevelopers LIVE - Playing in Production thumbnail

Playing in Production

Andrew MacLean +2

Sep 2026

Upcoming sessions on this topic

Architecting Secure and Encrypted Microservices in K8s

Arushi Garg

Adobe

SDE-2
MV Shiva

Google

SWE

Cloud Sovereignty Is an Architecture Problem: Patterns for Modern Platform Teams

Josephine Eskaline Joyce

IBM India Pvt Ltd

STSM, Chief Architect
Norton Stanley

IBM

Storage Architect

100 APIs, 1000 Headaches: Overcoming Data Transformation Challenges in API Integration

Pradeep Sharma

RudderStack

Developer Relations Specialist

Supply Chain Security for the Everyday Engineer

Pradumna Saraf

Kestra Technologies

Quality Assurance Engineer

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

Vikram Vaswani

Consultant

How We Cut Our API's p99 Latency from Minutes to Under a Second

Deepak Agrawal

Atlassian

Principal Software Engineer

Related videos

Bullet-Proof APIs: The OWASP API Security Top Ten thumbnail

Bullet-Proof APIs: The OWASP API Security Top Ten

Christian Wenz · Arrabiata Solutions

World Congress · 2025

Lessons learned from observing a billion API requests thumbnail

Lessons learned from observing a billion API requests

Pratim Bhosale · Treblle

World Congress · 2025

Trust Issues: Because Zero-Trust Isn’t Optional Anymore thumbnail

Trust Issues: Because Zero-Trust Isn’t Optional Anymore

Jan Peer Stöcklmair · Sentry

World Congress Europe · 2026

An Opinionated Guide to Bulletproof APIs thumbnail

An Opinionated Guide to Bulletproof APIs

Rustam Mehmandarov · MILES

World Congress Europe · 2026

Keeping applications secure by evolving OAuth 2.0 and OpenID Connect thumbnail

Keeping applications secure by evolving OAuth 2.0 and OpenID Connect

Alexander Schwartz · IBM

World Congress Europe · 2026

How to Defend Against Data Manipulation Attacks - Bozidar Spirovski & Wekoslav Stefanovski thumbnail

How to Defend Against Data Manipulation Attacks - Bozidar Spirovski & Wekoslav Stefanovski

Bozidar Spirovski +1

Coffee With Developers · Mar 2026

Related articles

DC

Daniel Cranney

Infer Once, Run Everywhere: Zero-Token Architecture

“You are all having way too much fun burning way too many tokens”. Kelsey Hightower kicked off his talk at the WeAreDevelopers World Congress North America by calling out the developers in attend...

26 days ago

A close-up on a screen showing a terminal with 'today's token spend: 0' on it.

DC

Daniel Cranney

Do You Trust Your Agents? Five Quick Ways to Contain Them

Do you trust your agents? Most of us use coding agents every day now. Give one a vague request, walk away, and come back to a pile of mostly working software. It’s brilliant, right up until you rem...

17 days ago

An image of a cube-shaped container with a ball of light inside of it

DC

Daniel Cranney

Understanding and Mitigating Common Web Vulnerabilities

Vulnerabilities exist in many forms on the web, and attackers continue to find creative ways to exploit them. Technological advances like the proliferation of AI are of course exciting nd filled wi...

over 1 year ago

An image with neon lighting featuring a globe and a padlock

CS

Christina Schaireiter

Security Basics for Vibe Coders

Vibe coding has become a popular trend in the tech world. With so many tools now available for both developers and non-developers, it’s easier than ever to build projects using natural language, in...

over 1 year ago

Vibe Coding

From learning to earning

Jobs that call for the skills explored in this talk.

about 2 months ago • Verified

Senior Product Security Architect

Austin, United States

Expert Remote Agentic AI Security Architecture

Senior Software Engineer, Identity Platform

San Francisco, CA, United States

Expert $329k Ruby OAuth Golang

Security Engineer

Experienced Remote Twilio Service Stack Data Poisoning

Enterprise Architect

Brussel, Belgium

Devsecops Api Design Web Platforms

Security Engineer, Incident Response

New York, NY, United States

Expert $142k–208k Remote Twilio Service Stack Data Poisoning

Staff Enterprise Security Engineer, AI Security

Beverly Hills, CA, United States

Experienced $155k–194k Remote Twilio Agentic-AI Kubernetes