News for hackers. Stuff that matters.

A comment on Launch HN: Escape (YC W23) – Discover and secure all your APIs. Parent comment

Re:Launch HN: Escape (YC W23) – Discover and secure all your... by ichbinlegion on Thursday February 01, 2024 @06:09PM (#39222821)
> It will not attempt the riskiest attack scenarios

What does that mean exactly?

Do you manually assess what is risky for a particular API, or is it up to the system to choose?

If it's up to it, what happens if it thinks that's not risky to delete user data?

[ Parent | on HN ]
Re:Launch HN: Escape (YC W23) – Discover and secure all your... by glimow on Saturday February 03, 2024 @08:32AM (#39240181)
We created specific safeguards for production mode; for instance, Escape doesn't launch any DELETE requests in prod mode.

You can also manually configure an allowlist/blocklist of operations for specific use cases.

[ Parent | on HN ]