2 years ago

Category: Data

Shadow APIs are a problem that not everyone takes seriously. Only 11% of people surveyed for Salt Security’s State of API Security Q3 2021 are greatly concerned about the security risks of shadow or unknown APIs. In contrast, 42% are greatly worried about zombie APIs, which were assumed to be turned off but can be targeted for an account takeover.

Every unaccounted API adds to that problem, but so do APIs that that are documented incorrectly. Perhaps the easiest thing to do going forward is to remind everyone that zombie APIs are really just a category of shadow APIs.