Risky APIs

Risky APIs will rank your application's endpoints by how exposed they are and how much vulnerable code they can reach. It is in development; this page explains what to expect.

Current status

Risky APIs appears in the dashboard menu, and the Overview has a Top 5 Risky APIs card. Both show Coming soon for now. Nothing needs to be set up for it.

lightbulb

Until it ships, you can already prioritise by exposure. Mark your internet-facing files as external in the dependency map, and their vulnerabilities rise in the risk score. See Marking files internal or external.

What it will show

Your endpoints, ranked by exposure and risk.
Endpoints with missing or weak authentication.
The vulnerable dependencies each endpoint can reach, and how many files are affected.

The highest-priority endpoints will be shown first, as with the other dashboard pages.