domains / families / security / performing-api-inventory-and-discovery

performing-api-inventory-and-discovery

separate

'Performs API inventory and discovery to identify all API endpoints in

When to use

• Mapping the complete API attack surface of an organization before a security assessment
• Identifying shadow APIs deployed by development teams without security review
• Discovering deprecated or zombie API versions that remain accessible but unmaintained
• Finding undocumented API endpoints exposed through mobile applications, SPAs, or microservices
• Building an API inventory for compliance requirements (PCI-DSS, SOC2, GDPR)

When not to use

• Use without written authorization

Skill page

Source