Reducing the cyber stack with API security