Skip to main content
APIContext
Talk to salesStart free
Start HereGuidesConceptsCLIReferenceChangelogStatus

Security Profiles

APIContext's API security monitoring validates runtime security behavior against production APIs, not just design-time checks. Below are the conformance standards that APImetrics checks:

  • Basic Security
  • FAPI 2.0
  • FDX API 5.3, in three variants:
    • FDX API 5.3 (No PAR, MTLS) and FDX API 5.3 (No PAR, Private Key JWT): see No PAR
    • FDX API 5.3 (PAR): see PAR
  • OAuth 2.0: based on the OAuth 2.0 Security Best Current Practice, which sets security requirements for OAuth 2.0 clients and servers
  • UK Open Banking, in four variants: UK Open Banking (TLS Client Auth), UK Open Banking (Private Key JWT), UK Open Banking v4 (TLS Client Auth), and UK Open Banking v4 (Private Key JWT)
  • New Zealand Open Banking

You choose a project's profile in the Manage Standards Profiles section of Conformance Settings (Conformance, then the Settings tab).

See also​