I'm a SaaS Developer and I've Learned That the Hard Way

There's an art form to creating data transfer objects. You have to do a lot of work. There's another part of this, which is developers take an easy way out and using their entire models going across the wire and exposing the database structure. That's actually one of the top 10 vulnerabilities in the OOS API security top 10. People were just realizing because they didn't know any better. I also think that's going to be tough to detect that even happened.