Siemba has announced automated testing for insecure direct object references (IDOR) as part of its API Security Testing capability. The new feature targets production APIs, bringing continuous checks for a vulnerability class that often leads to unauthorized access to customer data.
The testing supports REST, GraphQL, and SOAP APIs, covering the common API styles used in modern applications. According to the announcement, the approach is designed to identify the vulnerability classes most likely to expose sensitive customer information, rather than only scanning for generic misconfigurations.
Because IDOR flaws are frequently introduced during development and can slip past traditional security reviews, running these tests continuously against production APIs gives organizations a better chance of finding and fixing broken access control before attackers exploit it. The announcement does not detail specific detection methods or integration steps, but positions the feature as part of Siemba's broader API security testing offering.