Security in API performance