API security: OWASP API Top 10, authentication best practices, rate limiting, schema validation and monitoring setup.