Chapter 5 of 7 · 4 checks · 2 min
TLS, CORS and security headers
Checks on how the API is reached: encrypted transport, which origins may call it from a browser, and the headers that go with each response.
5 more chapters, 25 more checks, free with an account.
You have read the open chapters of the API Security Checklist checklist. Every chapter it covers is listed above, and an account opens the rest: each check with why it matters, how to apply it and an example, with your progress saved as you tick them off. Early access is open: sign up and your account is active shortly after.
Everything here is free to learn from. A few things, like adding a roadmap, keeping a cheat sheet or asking Tauseef a question, use credits. You get 15 when you join, your first roadmap is free, and if you are learning seriously and run out, you can ask for more. Credits only make sure the platform goes to people who are actually learning.