API MythBusters Chalk Talk: Shift-left Security

APIs are the foundation of our digital world, and organizations are building and integrating APIs at an accelerating rate. Attackers know the vital role APIs have in connecting critical data and services, which in turn makes APIs a primary attack vector. Old ways of thinking about API security must change in the face of this reality.
This video series uses visual and illustrative techniques to debunk common industry myths surrounding API security, cut through the fluff of security industry trends, and guide you in your API security strategy.
In this episode, we tackle the pitfalls of shift-left. Some elements of API security should be addressed in code, but many API security controls must be present in runtime that are external to code. Focusing solely on build pipelines results in security gaps for organizations due to scanner design limitations and compressed release windows.