Viewing 17 Results for API Security
How Postman Passport keeps API secrets inside your network
Postman Passport grants API access using credential references, keeping the real secret inside your network. Here’s how the architecture works.
Closing the API Security Gap: Postman and Wiz, Better Together
Wiz runtime security is now embedded in the Postman API Catalog, giving teams a unified view of API risk before it becomes a breach.
What’s new in Postman: Secrets management built in
Postman now detects and vaults API secrets automatically at runtime. Learn how Local Secrets Protection, Shared Vault, and Secrets Resolution keep your credentials safe.
Postman Passport: Secure API access for the Agentic Era
Postman Passport gives agents and developers credential references instead of real API keys, keeping secrets inside your VPC and eliminating secret sprawl.
What is a Bearer Token? Understanding API Authentication
Quick answer Bearer tokens authenticate API requests by granting access to whoever possesses the token, passed in the Authorization header as Authorization:…
Choose the right Postman plan for your organization
Update: Postman plans are changing in early 2026. For the latest information, visit our pricing page. When it comes to API development…
Postman (Free) is secure by design
As Postman’s Head of Security, I am dedicated to ensuring that all Postman users (paying or not) benefit from enterprise-grade security baked…
What is API encryption?
API encryption is the process of encoding data that is sent between a client and an API in order to prevent unauthorized…
Third-party library encryption with Mastercard and Postman
This is guest post written by Tarric Sookdeo, senior content strategy analyst at Mastercard. When an API is handling sensitive data such…
The 3 fundamental checks of API governance rules
API definitions, such as OpenAPI documents, are often inspected to perform automated API governance checks. As an API definition aims to describe…
5 ways to reduce exposure to API security risks
API security has become a significant concern as insecure APIs may provide attackers with access to sensitive customer data. In recent years,…
OWASP API Security Top 10 2023 and GraphQL
This is a guest post by Antoine Carossio, ex-Apple, cofounder & CTO at Escape – GraphQL Security. The OWASP API Security Top…
