Api Security | Hokstad Consulting

Tool Schema Design: 7 Function Calling Practices

October 31, 2026 DevOps Management API Security Prompting

Seven rules for designing tool schemas and function calls: clear names, precise types, enums, nested objects and strict runtime validation.

October 28, 2026 DevOps Management API Security Model Evaluation

Treat failed agent tool calls as contract failures: trace versions, isolate mismatches and enforce contract tests.

October 13, 2026 Security Operations API Security Model Evaluation

Test rate limits, detection and user impact to measure, tune and retest defences against distributed AI model extraction.

October 12, 2026 Security Operations API Security Compliance Management

Deploy a read-only SharePoint connector for AI agents with access checks, minimal Graph permissions, cited retrieval and testing.

September 05, 2026 DevOps Management API Security Compliance Management

Build-time SBOMs show package composition; KBOMs map live Kubernetes workloads—use both for audits, governance and fast incident triage.

August 21, 2026 SaaS Management API Security Compliance Management

Use SAML for browser-based enterprise SSO and OIDC for modern web, mobile, SPA and API-driven apps; choose by app type and operational cost.

June 28, 2026 DevOps Management API Security Data Protection

Short-lived JWTs, strict signature/iss/aud/exp/scope checks, correct OAuth2 flows (PKCE or client credentials), secure storage and monitoring.

June 07, 2026 Cloud Computing API Security Automation Compliance Management

Static RBAC is unsafe for agentic cloud systems — AI enforces per-request, context-aware access with short-lived capability tokens.

May 25, 2026 DevOps Management API Security Compliance Management

Implement least-privilege IAM for CI/CD pipelines using OIDC, permission boundaries, CloudTrail and IAM Access Analyzer.

May 05, 2026 DevOps Management API Security Cloud Optimization Performance

API gateways are the frontline for enforcing rate limits and throttling to protect backends and ensure fair traffic.

May 02, 2026 DevOps Management API Security Compliance Management

How RBAC protects API gateways: define roles, enforce via IAM, integrate with JWT/OAuth, monitor logs and audit access.