API

An API is the interface through which software components and services talk to each other, and it is how most modern web and mobile apps move data. Because APIs expose business logic and data directly, they are a top attack target, with issues like broken authorization leading the OWASP API Security Top 10. Securing APIs means authenticating callers, enforcing authorization on every object, and validating all input.