How Postman Agent Mode hacks for me

Code is shipping faster than it ever has. AI assistants are writing the first draft of pull requests on most teams I…

Postman is HIPAA-Compliant

Every security team evaluating a vendor is asking the same core questions: Where is my data? Is it encrypted? Who can access…

How We Scaled Security Reviews Without Slowing Down Engineering

At Postman, we ship fast. Velocity is part of our culture. But as we scaled, one question kept resurfacing: How do we…

We Fed Security Leaders Wagyu and Hard Truths at RSA. Here’s What We Learned.

A recap from Postman’s intimate dinner for security leaders — where the wine was world-class and the reality checks were free. A…

Embedding Security from Code to Cloud

Earlier this year, we shared that Postman had joined Wiz’s Zero Critical Club, a milestone that reflects a deliberate, engineering-first approach to…

API Security Best Practices: A Developer’s Guide to Protecting Your APIs

This guide explains how to secure an API in production. You’ll learn: The most important API security best practices Common vulnerabilities like…

Choose the right Postman plan for your organization

Update: Postman plans are changing in early 2026. For the latest information, visit our pricing page. When it comes to API development…

Postman (Free) is secure by design

As Postman’s Head of Security, I am dedicated to ensuring that all Postman users (paying or not) benefit from enterprise-grade security baked…

Postman Security Update: Fixing a URL Exposure Risk in ‘Related Requests’

At Postman, security is a continuous, proactive process. As we recently wrote about, we build, test, and strengthen our platform daily to…

Postman’s handling of secrets

A recent look at Postman’s secret and environment variable logging is an important conversation to have with our community and one that…

Secure by design: Introducing Postman Spec Hub and BYOK encryption

The demand for “better APIs, faster” has reached a fever pitch in engineering offices around the globe since the sharp rise in AI…

Announcing automatic removal of secrets on the Postman API Network

Updated on March 13, 2025 We are humbled by the global adoption of the Postman API Network in recent years. Having grown…