Ask HN: How do you deal with API security in your org?

I recently read the State of API security report by Salt, and it got me thinking: How are you dealing with API security in your org? Are you using AI tools yet?