API Security: Add metrics to security report

  1. Identify metrics to log
  2. Add metrics to internal events API
  3. Add metrics to security report
  4. Verify metrics are being collected

Metrics

  1. Is per-request script in use
  2. Is HAR file in use
  3. Is OpenAPI file in use
  4. Is Postman collection in use
  5. Is overrides in use
  6. How long did scan take?
  7. API Security scan
  8. API Fuzzing scan
  9. Which checks were run
  10. Which checks found issues
  11. Did the scan fail
  12. How many operations?
  13. GraphQL
  14. REST
  15. SOAP
  16. XML
Edited by Michael Eddington