Skip to main content

API & authentication

API security test suite

Internal regression suite of around 280 security-focused API tests.

Healthy

all tests passed

Checked 9/20/2026, 3:07:41 PM · Source: Continuous integration

Nightly integration suite passed against a real Postgres testcontainer. Suite covers auth (CSRF, bearer tokens, session bridge), webhook signature verification + replay, content sanitisation, the unauth 401 matrix (~280 cases), and concurrency/race-condition tests.

What this check means

An in-house suite of tests targeting authentication, authorization, CSRF, content sanitisation, content-length enforcement, webhook integrity, and the unauthenticated 401 matrix across every endpoint. Runs before every change to the codebase and on a nightly schedule against production-equivalent infrastructure.

Recent runs

WhenResultSource
9/20/2026, 3:07:41 PMall tests passedContinuous integration
9/20/2026, 3:09:14 AMall tests passedContinuous integration
9/19/2026, 3:07:54 PMall tests passedContinuous integration
9/19/2026, 3:08:59 AMall tests passedContinuous integration
9/18/2026, 3:08:56 PMall tests passedContinuous integration
9/18/2026, 3:09:08 AMall tests passedContinuous integration
9/17/2026, 3:09:13 PMall tests passedContinuous integration
9/17/2026, 3:09:09 AMall tests passedContinuous integration
9/16/2026, 3:08:45 PMall tests passedContinuous integration
9/16/2026, 3:09:16 AMall tests passedContinuous integration
9/15/2026, 3:09:03 PMall tests passedContinuous integration
9/15/2026, 3:09:30 AMall tests passedContinuous integration
9/14/2026, 3:09:41 PMall tests passedContinuous integration
9/14/2026, 3:10:07 AMall tests passedContinuous integration
9/13/2026, 3:07:52 PMall tests passedContinuous integration
9/13/2026, 7:04:11 AMall tests passedContinuous integration
9/13/2026, 6:36:45 AMall tests passedContinuous integration
9/13/2026, 3:09:11 AMall tests passedContinuous integration
9/12/2026, 10:23:06 PMall security tests passed (1 non-security failure)Continuous integration
9/12/2026, 3:07:41 PMall tests passedContinuous integration
9/12/2026, 3:08:45 AMall security tests passed (1 non-security failure)Continuous integration
9/11/2026, 7:58:11 PMall tests passedContinuous integration
9/11/2026, 3:08:36 PMall security tests passed (4 non-security failures)Continuous integration
9/11/2026, 3:09:03 AMall tests passedContinuous integration
9/10/2026, 3:08:54 PMall tests passedContinuous integration
9/10/2026, 3:08:54 AMall tests passedContinuous integration
9/9/2026, 6:07:32 PMall tests passedContinuous integration
9/9/2026, 3:08:31 PMall tests passedContinuous integration
9/9/2026, 3:09:16 AMall tests passedContinuous integration
9/8/2026, 3:09:16 PMall tests passedContinuous integration

Need additional detail (sanitised report, supporting evidence)? security@theartofcto.com