APIs heighten security exposure for enterprise information assets. By opening up an interface to backend systems to virtually any software developer in the world, REST and JSON-based APIs potentially raise the risk levels for the big three of information security: Confidentiality, integrity and reliability. While every enterprise will work to secure its APIs, real world experience show that the challenge of API security is complex and nuanced.