API Security Audit by Baptiste Coste