Shadow API
A live API version or endpoint nobody is actively tracking or securing.
Learn it through a story
- Every API Is a Promise Someone Will Break (Cybersecurity for Juniors 3, Ch 5)
Related terms
- Security champion A team member, not on the security team, trained to run lightweight security checks on their own team's work.
- Security mindset Applying these questions as a habit of thought across any role, not only security-titled jobs.
- Shadow AI People using AI tools at work that their organisation hasn't approved.
- Shadow IT Software, tools, or services in use without formal approval or security review.
- Shared responsibility model The idea, especially in cloud computing, that security is split between a provider and its customer, not owned entirely by either.
- Shelf reference A resource meant to be revisited repeatedly, not read once and shelved for good.