For each type of API endpoint, our security experts will fully review any documentation and examine all the requests, headers, and parameters. We will also consider your industry and gather additional information about infrastructure and the full software stack. While malicious actors can determine these details with enough time and energy, we request this level of detailed information specific about your environment because the more we know about your API methods, the better value we can give you on your API security testing engagement.