API vulnerability prevention