Whitepaper: Go Fuzz Yourself

Omitting fuzzing from your penetration testing of APIs leaves vulnerabilities undetected that other tactics and techniques won't find. Alissa and Detectify bring you new research on the efficacy of fuzzing as part of the web penetration testing toolkit and especially of APIs.