Overview

APIGit offers two predefined rulesets available to all users on the Free, Team and Enterprise plans. These rulesets provide immediate governance capabilities for your API repositories without requiring custom configuration. Both are listed in the ruleset dropdown of the Governance view, and OpenAPI Best Practice is selected by default.

OWASP Top 10 Security

This ruleset scans OpenAPI documents to identify potential security vulnerabilities and issues. While OpenAPI specifications describe the interface layer rather than implementation details, this ruleset can effectively detect:

• Obvious security flaws
• Implementation of outdated security standards
• Common API security misconfigurations

The ruleset is built on the foundation of the OWASP API Security Top 10 2023  edition, ensuring alignment with industry-recognized security best practices.

OpenAPI Best Practice

This ruleset evaluates OpenAPI documents against established best practices to check:

• Consistent API design patterns
• Proper documentation standards
• Optimal specification structure
• Clear endpoint naming conventions
• Appropriate use of OpenAPI features

By using these predefined rulesets, teams can quickly establish baseline governance standards while maintaining the flexibility to add custom rules as their API governance program matures.