Security Testing

API Security Testing: Check That Your API Refuses What It Should

A functional test asks whether your API gives the right answer to a correct request. A security check asks the opposite: when someone sends a request they should not be allowed to send, does your API refuse it?