Siemba brings continuous IDOR testing to production APIs

Siemba has added automated insecure direct object reference (IDOR) testing to its API Security Testing platform. A 200-endpoint collection can be tested in under an hour instead of days of manual work, covering REST, GraphQL and SOAP, with findings delivered already written up with reproduction steps.

• A 200-endpoint API collection is tested for IDOR in under an hour
• REST, GraphQL and SOAP are each tested to their own specification
• Findings map automatically to 9 of 10 OWASP API Security Top 10 categories
• Testing runs against production with four throttle presets and freeze windows up to 30 days