Viewing 20 Results for API Security
Enterprises: Stop Handing Out API Keys! (How Postman Ended Credential Sprawl with Passport)
As Postman rapidly shifted to building agents and hosting agentic workflows, we knew that reducing that increased risk required solving credential sprawl….
Postman adds site-wide licensing, Private Cloud, and an air-gapped client
Learn how Postman’s new site-wide licensing, Private Cloud, and air-gapped client help enterprises control deployment and secure API access for agents.
From API Keys to Access Control: Rethinking Secrets Management
For as long as software has called APIs, we’ve solved the same problem the same way. The code needs a secret (a…
How Postman Passport keeps API secrets inside your network
Postman Passport grants API access using credential references, keeping the real secret inside your network. Here’s how the architecture works.
Closing the API Security Gap: Postman and Wiz, Better Together
Wiz runtime security is now embedded in the Postman API Catalog, giving teams a unified view of API risk before it becomes a breach.
What’s new in Postman: Secrets management built in
Postman now detects and vaults API secrets automatically at runtime. Learn how Local Secrets Protection, Shared Vault, and Secrets Resolution keep your credentials safe.
Postman Passport: Secure API access for the Agentic Era
Postman Passport gives agents and developers credential references instead of real API keys, keeping secrets inside your VPC and eliminating secret sprawl.
What is a Bearer Token? Understanding API Authentication
Quick answer Bearer tokens authenticate API requests by granting access to whoever possesses the token, passed in the Authorization header as Authorization:…
Choose the right Postman plan for your organization
Update: Postman plans are changing in early 2026. For the latest information, visit our pricing page. When it comes to API development…
Postman (Free) is secure by design
As Postman’s Head of Security, I am dedicated to ensuring that all Postman users (paying or not) benefit from enterprise-grade security baked…
What is API encryption?
API encryption is the process of encoding data that is sent between a client and an API in order to prevent unauthorized…
Third-party library encryption with Mastercard and Postman
This is guest post written by Tarric Sookdeo, senior content strategy analyst at Mastercard. When an API is handling sensitive data such…
