API SECURITY ASSESSMENT