“I think number one thing is to make sure that all the APIs that get spun up are controlled, whatever you have, your CI/CD process or some other process that would discover all the APIs and you have a good grasp of the APIs that you have.”

Transcript evidence from Dmitry Sotnikov – REST API Security – there is no silver bullet.