0PricingLogin▼
Cyber Security Academy · Lesson

Broken Authorization

BOLA and access flaws.

Authentication vs Authorization

Authentication proves who you are. Authorization decides what you are allowed to do.

Broken authorization means the system lets users do or see things they should not.

What Is BOLA

BOLA stands for Broken Object Level Authorization.

It is the top API risk: an API checks that you are logged in, but not that the specific object you ask for actually belongs to you.

All lessons in this course

  1. API Attack Surface
  2. Broken Authorization
  3. Rate Limiting and Abuse
  4. Securing API Keys
← Back to Cyber Security Academy