Table of Contents

• Table of Contents
• About OWASP
• Foreword
• Introduction
• Release Notes
• API Security Risks
• OWASP Top 10 API Security Risks – 2019
• API1:2019 Broken Object Level Authorization
• API2:2019 Broken User Authentication
• API3:2019 Excessive Data Exposure
• API4:2019 Lack of Resources & Rate Limiting
• API5:2019 Broken Function Level Authorization
• API6:2019 Mass Assignment
• API7:2019 Security Misconfiguration
• API8:2019 Injection
• API9:2019 Improper Assets Management
• API10:2019 Insufficient Logging & Monitoring
• What's Next For Developers
• What's Next For DevSecOps
• Methodology and Data
• Acknowledgments