From Dev.to
API Rate Limiting: How to Test It and How to Design It
Rate limiting is usually discussed as an availability feature. In APIs it is also a security control — for brute force, enumeration, scraping, and cost abuse. Most implementations are weaker than the...