Sygnum interview question

How do you ensure security in your API calls?