This is actually the first time I see someone requires an external pen test in order to access APIs. I wonder if this will become de-facto the standard for inte

This is actually the first time I see someone requires an external pen test in order to access APIs. I wonder if this will become de-facto the standard for integrating with public APIs which serves any level of public information.