API security must be a top priority for bank’s security investments. API security is a broad and technical topic where the devil is in the details. One of the cornerstones of external API integration are API gateways. Some banks choose direct point-to-point integrations to enable their fintech ecosystems and forgo the use of an API gateway. This approach is problematic for many reasons.