API6:2023 — Unrestricted Access to Sensitive Business Flows
Verified by Precogs Threat Research
What is Unrestricted Access to Sensitive Business Flows?
APIs that expose sensitive business flows (purchasing, commenting, voting, booking) without protecting against excessive automated access. Bot-driven abuse of legitimate business functions.
Impact
Scalper bots buying all inventory, automated review/vote manipulation, credential stuffing on login APIs, and automated mass registration.
How Precogs AI Addresses API6
Precogs AI identifies business-critical API endpoints lacking rate limiting, CAPTCHA, or bot detection mechanisms during code review and runtime testing.