Securing a GraphQL API

Unlike more traditional REST APIs that require multiple endpoints for different resources, GraphQL enables developers to define a single endpoint that provides all the data they need in a single request. 

While convenient, this can potentially expose sensitive data or leave an opening for security vulnerabilities if not identified and implemented properly, such as injection attacks, cross-site scripting (XSS) attacks, or other types of malicious threats that target the API endpoints or input validation.

Fuzzing can be particularly useful in testing the security of GraphQL APIs, and can help developers proactively identify and address issues before they can be exploited by attackers.

In this live stream, fuzzing expert Josh Grant will outline:

• An overview of modern fuzzing techniques
• Potential vulnerabilities to threats in GraphQL APIs
• The benefits of using fuzzing to secure GraphQL APIs
• Best practices for securing your GraphQL API using Fuzzing

All code examples and tools we use are open-source and easily accessible via GitHub. 

If you cannot attend the session live, don't worry! The session will be recorded. Just sign up for a reminder to get the recordings.