After testing hundreds of APIs, the biggest issues are still HTTP basics
After years of testing APIs across fintech, gov, and internal platforms, I keep seeing the same pattern: Most API bugs are not complex. They’re boring HTTP basics that teams quietly forget. A few examples I see again and again: Missing auth returns 403 instead of 401 — so clients debug permissions instead of authentication Unsupported HTTP methods return 200 — so people debug payloads instead...


I spent 18 years breaking software, now I built a tool that does it faster than I ever could
I’m Liudas — a QA engineer with 18 years of experience in backend/API testing, leading QA teams in security-critical environments in the UAE. I built Rentgen because most API bugs are simple edge cases no one has time to test manually. One cURL → hundreds of generated test cases. All local, no cloud, no telemetry. I believe in no-nonsense engineering, fast feedback loops, and tools that help...
