ForAllSecure

NOVEMBER 15, 2022

Mayhem for API comes with a GitHub Action and a GitHub App to help you check every change to your API for reliability, performance, and security issues. Our CLI can also upload Mayhem for API results to GitHub Code Scanning from any CI. Create a workflow that starts your API and invoke the Mayhem for API action.

Accountability 52

Accountability 52

ForAllSecure

SEPTEMBER 7, 2022

With the rapid development of modern web APIs, developers must balance quality, reliability and security with time to market. When approaching testing, developers will aim for covering the “happy path”, that is, testing that the API behaves correctly under a strict set of conditions. A Mayhem for API account.

Passwords 40

Passwords Authentication Marketing Accountability 40

ForAllSecure

AUGUST 18, 2022

Web APIs have become increasingly important to the operation of modern business. Many business models for new products and services are constructed based on APIs such as billing, IoT and identity providers. Engineers are under pressure to deliver web APIs that are tested, observable, maintainable, scalable and secure!

Engineering 52

Engineering Software IoT 52

Security Boulevard

SEPTEMBER 15, 2022

The post How to Start with Mayhem for API appeared first on Security Boulevard. If you haven't done so yet, the fastest way to get started is to sign up for a free plan at [link]. If you already have an account, then you are ready to go for the next steps!

Accountability 52

Accountability 52

ForAllSecure

APRIL 13, 2021

One of Mayhem for API’s guiding principles is to seamlessly integrate into existing developer ecosystems. We integrated Mayhem for API with GitHub from Day 1. Our GitHub App enables Mayhem for API to add GitHub Checks directly in your Pull Request. Mayhem for API issue, in your PR.

Accountability 52

Accountability Software 52

ForAllSecure

JULY 6, 2021

I recently wrote about using Mayhem for API to fuzz etcd server. I thought it’d be interesting to see what Mayhem produces in the hands of someone who knows the target API in and out. Why not just point Mayhem for API at my API spec and see what happens? Make API Testing Ridiculously Easy.

Authentication 52

Authentication 52

ForAllSecure

SEPTEMBER 7, 2022

With the rapid development of modern web APIs, developers must balance quality, reliability and security with time to market. When approaching testing, developers will aim for covering the “happy path”, that is, testing that the API behaves correctly under a strict set of conditions. A Mayhem for API account.

Passwords 40

Passwords Authentication Marketing Accountability 40

ForAllSecure

APRIL 13, 2021

One of Mayhem for API’s guiding principles is to seamlessly integrate into existing developer ecosystems. We integrated Mayhem for API with GitHub from Day 1. Our GitHub App enables Mayhem for API to add GitHub Checks directly in your Pull Request. GitHub Code Scanning Integration for API Testing.

Accountability 52

Accountability Software 52

Security Boulevard

JUNE 10, 2021

The post Using Mayhem for API to Fuzz etcd appeared first on Security Boulevard. Last week, I found and fixed two crashing bugs in etcd , the distributed key-value store used (among other things) to manage the state of kubernetes clusters. I’m excited to have been able to contribute a bit to such an excellent project!

59

59

ForAllSecure

SEPTEMBER 15, 2022

The Mayhem for API CLI is available to download for various common platforms. ?? API Security. Prime Your APIs for Performance. The mapi CLI communicates with our API using OAuth 2.0 We have saved a new API token in your local settings at '/Users/mapi_fuzzer/Library/Preferences/rs.mapi/mapi.toml': 3BzW.

Security Performance 40

Security Performance Authentication Accountability 40

ForAllSecure

DECEMBER 6, 2022

Shifting left for API security has many benefits. It allows developers to produce better code, catch API issues earlier in the development cycle, and get their work done faster. What Is Mayhem for API? You can use Mayhem for API to test for API defects with each commit or build. What Is Shifting Left?

Software 52

Software Marketing Technology 52

ForAllSecure

NOVEMBER 30, 2022

Over the last several weeks, we’ve made a number of updates to both our flagship Mayhem for Code product and Mayhem for API. Recent improvements to Mayhem for Code (version 2.1) Recent improvements to Mayhem for API (version 2.15.7) In Mayhem for Code 2.1, Slow Tests Reporting (Mayhem for Code).

Software 52

Software Authentication 52

ForAllSecure

MARCH 7, 2023

In May 2021, the fitness company Peloton realized they had a problem with their APIs. The company, known for their fitness bikes, relied upon APIs to log members in and track their progress. The APIs also had access to account details such as name, address, and other personal information. What is API Vulnerability Scanning?

Accountability 52

Accountability Mobile 52

ForAllSecure

MAY 4, 2023

The Mayhem team has been on the road, enjoying the warm weather and sun. We participated in B Sides last month, hosted a webinar on “How to Increase Test Coverage With Mayhem for API”, and hosted a university hackathon at UC Santa Cruz. It’s officially spring time! Register for GlueCon here.

Engineering 52

Engineering Software Risk Marketing 52

Security Boulevard

OCTOBER 12, 2022

We now support API Key, Bearer Token, Basic Auth and OAuth 2.0. the access token must be synced in order for Mayhem to pick it up. Supplying Mayhem with authentication arguments overrides all Postman authentication. The post Fuzz test your API with Mayhem and Postman appeared first on Security Boulevard.

Authentication 52

Authentication 52

ForAllSecure

MARCH 1, 2023

Which API testing is best for you largely depends on the type and complexity of the APIs being tested. If you're dealing with a basic API that mainly performs CRUD (Create, Read, Update, Delete) operations, then simple manual testing may be sufficient. Is API testing manual or automated? Can API testing be done manually?

Software 52

Software Security Performance Authentication Accountability 52

ForAllSecure

NOVEMBER 17, 2022

Delivering secure, reliable APIs requires finding and fixing issues before shipping to production. That’s why Mayhem for API integrates easily into your CI/CD pipeline to automatically test your API for performance and security and validate it against your API specification. BUILD AND TEST YOUR API HERE //.

Accountability 40

Accountability Software 40

ForAllSecure

MARCH 7, 2022

It’s safe to say that APIs are now a critical part of modern application architectures today. In the age of SaaS applications and infrastructure, many architectures are designed around being API-first for managing data ingestion and retrieval. Start Fuzzing your APIs for Free! Mayhem for API is built around OpenAPI 3.0

Architecture 52

Architecture Firewall Internet Internet 52

ForAllSecure

OCTOBER 27, 2021

It’s safe to say that APIs are now a critical part of modern application architectures today. In the age of SaaS applications and infrastructure, many architectures are designed around being API-first for managing data ingestion and retrieval. Mayhem for API is built specifically to test APIs.

Architecture 52

Architecture Authentication Internet Internet 52

Security Boulevard

NOVEMBER 30, 2022

Over the last several weeks, we’ve made a number of updates to both our flagship Mayhem for Code product and Mayhem for API. Let’s take a look at each. The post 6 New Features This Month appeared first on Security Boulevard.

52

52

ForAllSecure

APRIL 11, 2023

In this post, we will explore how to increase test coverage in your API with Mayhem in four easy steps. What is Mayhem? Mayhem is a product to help organizations build reliable APIs. Mayhem provides a set of tools to automatically create and execute test cases using a state of the art fuzzing engine.

Engineering 40

Engineering Software Authentication 40

ForAllSecure

OCTOBER 12, 2022

Previously we talked about what fuzz testing is, and how Mayhem can read a postman collection. Mayhem compliments Postman tests with security tests for all of the edge cases your tests do not cover. Ultimately, if your Postman request works, we want Mayhem to just work. You will need to create an API key in postman.

Authentication 40

Authentication Engineering 40

ForAllSecure

FEBRUARY 23, 2023

Application programming interfaces, or APIs, are everywhere. Everything from your Fitbit to your car has an API. Even your bank likely has an API that you use when you check your balance or make a payment. With the release of Apple's HomeKit, we're seeing even more devices with APIs appearing in our homes.

Authentication 52

Authentication Threat Detection Firewall Technology 52

ForAllSecure

FEBRUARY 15, 2023

In the rush to comply with various standards, such as addressing the OWASP Top 10 API , companies are looking at API security with renewed interest. Some organizations have begun using Web Application Firewalls (WAFs) to protect their APIs, but this isn’t a true solution to API security. What do APIs do?

Firewall 40

Firewall Data breaches Mobile Authentication 40

ForAllSecure

APRIL 1, 2021

Web APIs are everywhere! We interact with APIs every day. We use APIs to write a tweet, discover music, make a purchase or anything else you can imagine. We write applications that are composed with other APIs using patterns such as API Gateways. API Fuzzing to the rescue! For instance: HTTP/1.1

97

97

ForAllSecure

MAY 11, 2021

The inspiration from Netflix and Chaos Engineering lead Alex and Thanassis to call their new technology “Mayhem” “We create controlled mayhem for you to make your software resilient in the face of chaos,” said Alex Rebert, co-founder and Head of Innovation at ForAllSecure. Mayhem Goes to Battle.

Engineering 52

Engineering Technology Software Cybersecurity 52

ForAllSecure

MAY 11, 2021

The inspiration from Netflix and Chaos Engineering lead Alex and Thanassis to call their new technology “Mayhem” “We create controlled mayhem for you to make your software resilient in the face of chaos,” said Alex Rebert, co-founder and Head of Innovation at ForAllSecure. Mayhem Goes to Battle.

Engineering 52

Engineering Technology Software Cybersecurity 52

ForAllSecure

NOVEMBER 16, 2022

A scenario many of our customers encounter early on when using Mayhem is how to account for branches. Let Mayhem Automatically Manage Test Creation. Because Mayhem generates and performs thousands of tests with each run, this approach doesn’t make sense. Keep an eye on Mayhem’s coverage reports to see this in action.

Accountability 52

Accountability Risk 52

ForAllSecure

JANUARY 10, 2023

We launched a free version of Mayhem. In January of 2022, we launched a free version of Mayhem to help individuals and small teams deliver safer, more reliable applications and APIs. You can get started with Mayhem here. Mayhem doesn’t require manual testing and produces zero false positives.

Software 52

Software Marketing Technology Hacking 52

ForAllSecure

JUNE 7, 2023

We have 4 upcoming events planned for June 2023: Mayhem Unleashed Webinar: Discover our Next Generation Security Testing Solution DevSecOps Roundtable CyberSecurity Summit Hartford ForAllSecure APFT (Adversary, Penetration, and FuzzTesting) Training Read on to learn more about June’s events. Stay tuned! We hope to see you there!

Engineering 52

Engineering Software Education Marketing 52

ForAllSecure

OCTOBER 14, 2021

We believe that world is possible, and we unleashed Mayhem to prove it. Mayhem is a brand new approach to application security that DARPA called revolutionary, and industry calls next-generation fuzzing. Mayhem is a brand new approach to application security that DARPA called revolutionary, and industry calls next-generation fuzzing.

Engineering 52

Engineering Cybersecurity Cryptocurrency Software 52

ForAllSecure

FEBRUARY 17, 2023

APIs share data and enable communication between everything connected to the internet. API testing ensures that these connections work as intended and that the information carried by APIs remains secure. What is API testing? API testing is a type of software testing that tests application programming interfaces (APIs).

Software 40

Software Penetration Testing Internet Internet 40

Security Boulevard

APRIL 6, 2021

Postman Collections are a great way to document, test, and share your APIs. With Mayhem for API, you can squeeze even more testing out of your existing postman collections. The post Testing Postman APIs with Fuzzing appeared first on Security Boulevard.

52

52

ForAllSecure

APRIL 27, 2021

On March 29, 2021, SC Magazine announced the finalists for their coveted SC Awards and ForAllSecure’s Mayhem for Code is a finalist for their “Best Enterprise Security Solution” category. This was proven with Mayhem for Code’s DARPA CGC win.

Software 52

Software Technology Surveillance Hacking 52

ForAllSecure

APRIL 27, 2021

On March 29, 2021, SC Magazine announced the finalists for their coveted SC Awards and ForAllSecure’s Mayhem for Code is a finalist for their “Best Enterprise Security Solution” category. This was proven with Mayhem for Code’s DARPA CGC win.

Software 52

Software Technology Surveillance Hacking 52

ForAllSecure

OCTOBER 6, 2022

For most APIs, the next step is setting up authentication. After all, without successfully authenticating, Mayhem for API can only test for very superficial problems! Giving the fuzzer a way to authenticate to the target API will enable it to exercise more endpoints and maximize coverage. API Security. Performance.

Authentication 40

Authentication Encryption Security Performance Passwords 40

ForAllSecure

APRIL 1, 2021

Web APIs are everywhere! We interact with APIs every day. We use APIs to write a tweet, discover music, make a purchase, or anything else you can imagine. We write applications that are composed with other APIs using patterns such as API Gateways. API Fuzzing to the rescue! For instance: HTTP/1.1

52

52