Postman is HIPAA-Compliant
Every security team evaluating a vendor is asking the same core questions: Where is my data? Is it encrypted? Who can access…
We Fed Security Leaders Wagyu and Hard Truths at RSA. Here’s What We Learned.
A recap from Postman’s intimate dinner for security leaders — where the wine was world-class and the reality checks were free. A…
Choose the right Postman plan for your organization
Update: Postman plans are changing in early 2026. For the latest information, visit our pricing page. When it comes to API development…
Postman (Free) is secure by design
As Postman’s Head of Security, I am dedicated to ensuring that all Postman users (paying or not) benefit from enterprise-grade security baked…
Postman Security Update: Fixing a URL Exposure Risk in ‘Related Requests’
At Postman, security is a continuous, proactive process. As we recently wrote about, we build, test, and strengthen our platform daily to…
Postman’s handling of secrets
A recent look at Postman’s secret and environment variable logging is an important conversation to have with our community and one that…