Mitigating OWASP API Security Risk: Excessive Data Exposure using F5 XC Platform

This is part of the OWASP API Security TOP 10 mitigation series, and you can refer here for an overview of these categories and F5 Distributed Cloud Platform (F5 XC) Web Application and API protect...
Fig 1: App UI exposing PII
Updated May 14, 2025
Version 5.0
cloud
devops
F5 Distributed Cloud
F5 Distributed Cloud WAAP
OWASP-API-Security
security
series-f5-distributed-cloud
series-owasp-oat
Verified Designs
Janibasha's avatar
Janibasha
Icon for Employee rankEmployee
Dec 14, 2023

Nikoolayy1 thanks for your feedback.

Yes you are right and we have the support to detect some of the known PII info like shown below in API Discovery or we can have our own custom regex.

As per my understanding custom regex masking support in dataguard is in future pipeline and will update once it's implemented.