Application programming interface (api) attack surface discovery using cloud security posture management (cspm)

A system to discover hidden Application Programming Interfaces (APIs) and detect security vulnerabilities in the hidden APIs, the system comprising:

• a Cloud Security Posture Management (CSPM) discovery agent configured to:
• access CSPM logs;
• and
• an API log analyzer configured to:
• discover APIs based on the CSPM logs;
• identify additional APIs that are not present in the CSPM logs;
• and
• initiate API calls using modified addresses for the APIs and the additional APIs to discover hidden APIs;
• and
• an attack surface discovery module configured to:
• test discovered APIs to determine attack surfaces in the discovered APIs, wherein the discovered APIs comprise the APIs, the additional APIs, and the hidden APIs.

One or more non-transitory computer-readable storage media having program instructions stored thereon to discover hidden Application Programming Interfaces (APIs) and detect security vulnerabilities in the hidden APIs, wherein the program instructions, when executed by a computing system, direct the computing system to perform operations, the operations comprising:

• accessing Cloud Security Posture Management (CSPM) logs;
• discovering APIs based on the CSPM logs;
• identifying additional APIs that are not present in the CSPM logs;
• making API calls using modified addresses for the APIs and the additional APIs to discover the hidden APIs;
• and
• testing discovered APIs to determine attack surfaces, wherein the discovered APIs comprise the APIs, the additional APIs, and the hidden APIs.