API testing

Test agreed API endpoints, authentication, authorization, input handling, and access to data.

Deliverables

• Endpoint and authorization scope
• API findings and remediation guidance
• Final report and agreed retest plan

Customer responsibilities

• Name an internal owner and provide agreed access to relevant systems and evidence.