Salt Security established “Salt Labs,” which offers a public forum for publishing research on API (application programming interface) vulnerabilities.
Salt Labs is designed to serve as a resource for helping enterprises engage more-secure infrastructure by promoting research into common issues and threats, in addition to improving public awareness of API-based threats.
The program is part of the company’s ongoing mission to provide “comprehensive API security and accelerate business innovation by making APIs attack-proof.”
Recently, in its “State of API Security Report,” Salt called API concerns a “significant inhibitor” of business innovation, with about 66 percent of organizations being forced to delay new software deployments due to such concerns.
Inaugural Salt Labs research will focus on gaps for the large financial institution. Of note, the resource flagged common concerns such as inadequate data access authorization, function access authorization, susceptibility to parameter tampering and improper input filtering across the financial platform.