#Japan #Tokyo #ThreeShake #Secure API #José Haro Peralta

ThreeShake's new translation: 'Secure API Principles'

On July 15, 2026, ThreeShake, a Tokyo-based technology company, will release a translated version of the important work, 'Secure API Principles: Design, Build, and Implement'. This essential resource focuses on the growing significance of API security in modern IT systems and responds to the urgent need for better protective measures against cyber threats.

This book, originally penned by API security expert José Haro Peralta, is based on his work, 'Secure APIs', published by Manning Publications in 2025. Nowadays, APIs are not merely connectors; they have become the primary targets for attackers, accounting for a vast portion of internet traffic. Traditional security testing approaches, which often occur haphazardly at the final stages of development, can no longer effectively thwart sophisticated attacks.

The crux of 'Secure API Principles' lies in the concept of 'security by design'. It emphasizes the importance of integrating security from the design phase, a methodology known as 'shift-left'. This approach offers comprehensive strategies for building robust APIs that can withstand potential threats. Peralta's insights stem from his extensive experience reviewing hundreds of APIs, translating into actionable techniques that developers can deploy in their projects.

Book Structure

The book is structured into several chapters, each tackling different facets of API security:

• - Chapter 1: What is API Security
• - Chapter 2: Alignment of Organizations with API Security
• - Chapter 3: Principles of API Security
• - Chapter 4: Key Vulnerabilities in API Authentication and Authorization
• - Chapter 5: Critical Vulnerabilities in API Configuration and Management
• - Chapter 6: Securing APIs through Design
• - Chapter 7: API Authorization and Authentication
• - Chapter 8: Implementation of API Authentication and Authorization
• - Chapter 9: Secure API Infrastructure
• - Chapter 10: Financial Grade APIs
• - Chapter 11: Observability for API Security
• - Chapter 12: Testing API Security

The translation has been handled by four dedicated engineers from ThreeShake: Hiroya Motoichi, Kohei Mizumoto, Shunto Orimo, and Shohei Koyagi. Their professional backgrounds encompass infrastructure engineering, application development, and security engineering, enhancing both the quality and accuracy of the translation.

Translator Profiles

• - Hiroya Motoichi: With a background as an infrastructure engineer, Hiroya thought deeply about operational practices during his time in the hosting service development and now works as a software engineer at ThreeShake. He also runs a blog titled 'Learning at Home'.
• - Kohei Mizumoto: Formerly involved in application development, Kohei currently serves as a security engineer at ThreeShake, with a specialization in container and cloud security.
• - Shunto Orimo: Starting his career in vulnerability diagnosis, Shunto contributes to security technology support and tool development. His practical knowledge of attack and defense strategies informs secure development practices.
• - Shohei Koyagi: After working in system development at a SIer since April 2014, Shohei joined ThreeShake as a product manager, focusing on the development of their security product, 'Securify'.

The release of 'Secure API Principles' comes at a critical time as organizations increasingly recognize the necessity for robust security measures in their API infrastructures. It not only promises to enhance the understanding of API security among developers but also equips them with practical strategies to mitigate risks. This book is a vital addition to the library of anyone involved in contemporary software development and security practices.

Book Details

• - Title: Secure API Principles
• - Original Author: José Haro Peralta
• - Translators: Hiroya Motoichi, Kohei Mizumoto, Shunto Orimo, Shohei Koyagi
• - Publisher: Shoeisha
• - Release Date: July 15, 2026
• - ISBN: 9784798196336
• - Price: ¥4,950

The relevance of this book cannot be overstated, as the demand for secure, reliable APIs continues to grow in an increasingly digital world. For those interested in acquiring this resource, it will be available through Shoeisha’s website and on Amazon.