API Security Archives – Cloudentity

Securing partner API integrations with OAuth mTLS

Published March 16, 2022

API Security General

Securing partner API integrations with OAuth mTLS API access using token-based architectures is already popular, and the authorization and governance of the minted tokens for access becomes very critical for APIs, which exposes data for partner integrations outside of the organization itself. This is exactly where we can utilize the OAuth mTLS specification along with...

The Experian Credit Score Breach: What Happened and How to Prevent Future API Data Breaches

Published May 3, 2021

API Security Breaches

Last week, the public was notified about a pretty serious Experian API-related incident leading to the potential public exposure of credit scores for millions of Americans. What Went Wrong? Experian’s credit score API drew the attention of a security researcher Bill Demirkapi. It started innocently with him looking around for student loan options. He bumped...

COVID-19 is Accelerating Digital Transformation and Security Challenges

Published January 28, 2021

API Security

By Gary Zimmerman, TechVision We have been saying for a while now that organizations aren’t just transforming, they are becoming Digital Enterprises. This means the transformation is on-going and pervasive as the Digital Enterprise is evolving to better enable the way we do business… And then 2020 happened. In just a few months’ time, the...

5 Reasons to Avoid Traditional IAM’s Bridge to Nowhere

Published July 2, 2020

Cloud Identity Management IAM

Even a global pandemic isn’t reducing the demand for digital transformation. As customers look for ways to engage with applications on their smart devices and workforces are increasingly “work from home”, the need for digital transformation has accelerated. Development teams eager to progress app modernization and transformation goals are looking for ways to accelerate the...

Authorization Weighs Heavily on API Security. Try Authorization as Code.

Published May 19, 2020

API Security DevOps Security

In the virtual “… as a code” world there is no place for compromises and exceptions. Infrastructure as code has served as the catalyst for the broader “as code” approach, providing simpler ways to drive digital innovation and scale. There is one problem though: human nature and perception. Any "virtual" entity is harder to control...

API Security

Securing partner API integrations with OAuth mTLS

The Experian Credit Score Breach: What Happened and How to Prevent Future API Data Breaches

COVID-19 is Accelerating Digital Transformation and Security Challenges

5 Reasons to Avoid Traditional IAM’s Bridge to Nowhere

Authorization Weighs Heavily on API Security. Try Authorization as Code.

Symcor launches Open Banking suite of services, supported by Cloudentity

Find out how we can help you with your identity and authorization journey