What is API discovery?
API discovery is the process of identifying and cataloging the APIs available on a server or within an application.
API Discovery helps create a comprehensive inventory of an organization’s internal and external API assets by identifying both existing and newly deployed APIs.
It enables the development teams to identify, locate, manage, and monitor their organization’s APIs, including previously missed or unknown ones.Few readersHow do I get server APIs on my Beagle Security dashboard without third-party tools?
With Beagle Security, you can now seamlessly discover APIs from your server right from the dashboard, eliminating the need for any external tools.
All the discovered APIs which can be included in the test will be displayed on the Beagle Security dashboard. From here, you can map the APIs to run the tests.
This document provides detailed insights into API discovery and guides you through its configuration process.
Follow the steps outlined to streamline the API discovery process:
LogFew readersHow to check the response of APIs during the configuration?
While configuring your APIs for security testing, you have the option to check the response of the APIs. This allows you to make sure that all APIs are configured correctly and return the expected response before you start the test.
To check the response, you can follow the below steps:
Navigate to the Applications section and select the desired API
In the Configuration view, switch to the API tab
Click on Configure to access the API details
In the API details section, click the SeFew readersWhat types of APIs are supported in Beagle Security?
GraphQL and REST APIs are supported in Beagle Security.
The major difference between GraphQL and REST APIs is that, in GraphQL, the configuration is set for the queries, and in REST API, the configuration is set for the APIs.
What is GraphQL API?
GraphQL is simply a query language and a server-side runtime for APIs which provides the client application precise request data. It helps to make the APIs much-more developer friendly, faster, and flexible.
What is a REST API?
RepreFew readersWhat are the API specifications of GraphQL and REST APIs?
The major difference between GraphQL and REST APIs is that, in GraphQL, the configuration is set for the queries, and in REST API, the configuration is set for the APIs.
Global authorization
What is an authorization?
Authorization is the process of restricting and permitting access to resources and allowing only certain users or user groups to conduct specific actions defined for them. This ensures that data is accessed securely by the client requests.
What is a global aFew readersHow to start API security testing on Beagle Security?
Getting started
Beagle Security is an automated penetration testing solution that helps you proactively hunt-to-secure your web applications and APIs from all vulnerabilities.
Use this guide below to get started with the basics of configuring API security.
Setup your first API configuration
Create application:
Click on the ‘New’ button within the applications section.
Select ‘API’
In the "Project name" field, enter a new name or select an existingFew readersConfiguring your custom APIs for security testing
Shared variables
Shared Variables are reusable key-value pairs that can be defined once and used across multiple API configurations. They promote efficiency, consistency and reduce redundancy when setting up tests.
What are shared variables?
Shared variables allow you to store commonly used values such as user IDs, tokens or environment-specific parameters in one place and reference them throughout your API test configurations.
For example, you can define a variable like:
Variable NameFew readersHow to integrate Postman into your Beagle Security account for API Security testing?
Postman is one of the most widely used tools for testing and interacting with APIs, especially during development and debugging. It offers a user-friendly interface that allows developers and testers to send requests to API endpoints and view responses.
Below are some simple and effective steps you can follow to test your API using Postman:
Navigate to the Application section and select the desired application
Go to the Configuration view and open the API tab
Click on the Postman InteFew readers