APIs are how modern applications talk to each other. They're also how attackers get in. Most of the tools your team relies on to catch these problems were built for a different era, before APIs were everywhere and long before AI agents started making calls of their own. The gap is widening. Attacks that look obvious in hindsight keep slipping past the scanners your team already owns, and every new copilot or AI agent adds another door to defend.

This workshop is built to close that gap for one team in a single day. Bring your security leads, architects, engineers, and the developers shipping AI integrations, and they come back with a shared understanding of how modern API attacks work and how to stop them.

In the morning, Corey Ball (author of Hacking APIs, founder of APIsec University) and Jess Freeman show the team how API attacks actually unfold. Your people watch common security scanners miss real vulnerabilities in a live application, then exploit those same vulnerabilities themselves. These are the same kinds of flaws behind well-known breaches at Peloton, Coinbase, and Parler.

In the afternoon, Tyk's Laura Heritage and Kuldeepak Angrish pick up where the morning leaves off. The team sees first-hand why AI agents and the protocols they use create new security gaps, then works through hands-on labs that show how to close them.

Everyone who attends leaves with practical skills, a Credly badge, and CPE credits toward CISSP, CISM, CISA, and CRISC. You get back a team that shares the same reference points, the same vocabulary, and the same working patterns for defending APIs in production.