Siemba automates IDOR tests and leaves chained attacks to humans

Founders Sandhya Prashanth and Kannan Udayarajan are putting exhaustive API checks in software while reserving business logic for pentesters.

By · Published

Primary source: PR Newswire

Why it matters

Authorization flaws persist because exhaustive cross-user testing is tedious. Siemba is making continuous coverage the baseline while preserving human time for chained attacks and privilege boundaries.

A cybersecurity expert at a desk with multiple monitors, with large display screens showing automated data analysis in the background.

Siemba said its platform can now test production APIs automatically for insecure direct object reference, an authorization flaw that can let one user view or modify another user's data.…

Reader comments

Conversation for this story loads after sign-in.