[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f4OV__uJuE5RC2HQwsBEpirh7K3mipAxcMaudH22hDck":3},{"article":4,"iocs":41,"watch_terms":42,"solutions":43,"lesson":30},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":28,"category":29,"article_tags":33},"3a949f01-1ae9-485b-b552-ac6b0fb90a6e","Strengthening API and MCP Security Through Token Risk Detection with Thales Imperva API Security","strengthening-api-and-mcp-security-through-token-risk-detection-with-thales-impe-41da89","Security teams can now investigate six token risks directly at the endpoint level, making it easier to prioritize findings and take action across their API estate. APIs depend on tokens to authenticate requests and control access. But weak signing algorithms, excessive token lifetimes, exposed credentials, and inadequate expiry enforcement can undermine that protection. Identifying these […] The post Strengthening API and MCP Security Through Token Risk Detection with Thales Imperva API Security appeared first on Blog.","Thales's Imperva API Security has been updated to surface six token and authentication risks directly within its API Inventory. This enhancement allows security teams to investigate issues like weak signing algorithms, excessive token lifetimes, and exposed credentials at the endpoint level, streamlining the process of identifying, prioritizing, and remediating API security vulnerabilities.","Thales Imperva API Security now detects six token risks at the endpoint level.","https:\u002F\u002Fwww.imperva.com\u002Fblog\u002Fstrengthening-api-and-mcp-security-through-token-risk-detection-with-thales-imperva-api-security\u002F","https:\u002F\u002Fwww.imperva.com\u002Fblog\u002Fwp-content\u002Fuploads\u002Fsites\u002F9\u002F2025\u002F06\u002Fabstract-architecture-building.jpg","2026-10-29T07:18:18+00:00","2026-10-29T21:00:22.405195+00:00",7,[17,20,23,26],{"name":18,"type":19},"Imperva API Security","product",{"name":21,"type":22},"Thales","vendor",{"name":24,"type":25},"API","technology",{"name":27,"type":25},"JWT","02371804-cf6d-4449-98de-f1a2d4d9b266",{"id":28,"icon":30,"name":31,"slug":32},null,"Tools","tools",[34,36],{"category":35},{"id":28,"icon":30,"name":31,"slug":32},{"category":37},{"id":38,"icon":30,"name":39,"slug":40},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[21,18],{"controls":44,"vendors":74},[45],{"slug":46,"name":47,"problem":48,"products":49},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[50,58,66],{"vendor_slug":51,"vendor_name":52,"vendor_logo":53,"product_slug":54,"product_name":55,"url":56,"description":57},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",[75],{"slug":76,"name":21,"logo_path":77,"roles":78},"thales","\u002Fvendor-logos\u002Fthales.png",[79],"reported_by"]