Jan
20,
2026
API Security Best Practices: Part 1
APIs are the backbone of modern applications today. They power web front ends, mobile apps, and IoT devices. But anyone who thinks API security is just "web app security in miniature" is mistaken!
Jul
16,
2025
Open Policy Agent in Practice: Real-World Policy Enforcement
Building on our previous introduction, this article dives deep into the practical application of Open Policy Agent (OPA) for centralized policy management in distributed systems. Discover how OPA enables flexible and scalable policy enforcement, focusing on critical use cases like API authorization, cloud security, and Kubernetes governance. Learn how to...
Jun
6,
2025
Open Policy Agent: Unified Control for API Security
Ensure consistent security and governance across your APIs, cloud, and Kubernetes environments with Policy as Code (PaC) and the open-source Open Policy Agent (OPA). This article explores the critical aspects of OPA testability and automation. Learn how to define policies as code for robust testing and seamless CI/CD integration, enabling...
Apr
23,
2025
Building Trust in AI-Powered APIs
AI-powered APIs are reshaping digital services—but trust is critical. This article shows you how to build that trust by applying responsible AI principles like transparency, fairness, and privacy. You’ll learn practical steps to design and manage AI APIs that are not only powerful but also ethical and reliable.
Aug
1,
2022
API vulnerabilities are not getting the needed level of attention
Are we sitting on major security vulnerabilities right now? How has security changed in the past 20 years? We interviewed Ilkka Turunen, Sonatype Field CTO and Muzaffer Pasha, Security Evangelist at Traceable about how to achieve better security in open source and in your organization.
