api gateway api governance api monitoring api monitoring tools api security api security testing authentication authorization automated security testing buffer overflow business solutions ci/cd cross-site scripting (xss) cybersecurity data breaches data privacy denial of service (dos) digital transformation encryption https input validation it consulting json web tokens (jwt) logging multi-factor authentication (mfa) oauth 2.0 pdpa rate limiting secure coding practices security by design software development sql injection thailand threat modeling throttling