API security takes some effort, but with adequate training, solid planning and a focus on best practices, companies can mitigate even the most insidious vulnerabilities.