API Security Testing & BOLA Audit

Identify authorization, authentication, rate-limiting, and business-logic weaknesses in REST and GraphQL APIs before they become incident vectors.