Your APIs are at risk when you need them the most