API testing is a very commonly used practice in quality engineering. Lately, it is being used for functional testing not just by the quality teams but also by development teams as after unit testing, this is one that helps everyone catch issues faster and closer to the root cause at a very granular level. API testing while largely still functional in nature has been increasingly used for other non-functional areas too, especially security and performance testing. On the security front, for example, the OWASP which thus far mainlyfocused on top ten OWASP vulnerabilities from a web standpoint, has now expanded coverage to top API vulnerabilities too. Read more »