Closing the Loop: Automating API Security in the Age of AI

he stated problem is the gap between what's running in production and what's in your codebase. Traffic analysis shows you what's being hit; the repo shows you what should exist. Neither alone catches an undocumented API quietly serving data.

Dain Perkins (Snyk) and Eli Arkush (Akamai) show how runtime discovery feeds back into the developer platform to close that gap, with Ryan Birch from Softcat on the advisory side. They also cover software supply chain attacks, using the Axios NPM package compromise as the worked example, and AI security posture management for governing API sprawl as AI-driven attacks learn to mimic legitimate traffic.

This is genuinely technical and aimed at teams building and running their own applications. If your organisation buys software rather than writes it, most of this won't apply.