Manage API Security rules in Postman

Configurable security rules are available with Postman Enterprise plans with the API Builder add-on. If you don't have an Enterprise account, you'll be able to see the API Security page, but you won't be able to turn rules on or off.

You can customize the API Security rules that Postman applies to your requests. Following API security rules enables you to keep your API secure and consistent. Team Admins with a Developer role can configure security rules.

To access the configurable API Security rules at the request level, do the following:

Go to the Postman home screen.
Select API Security from the team information pane.

To define and customize security rules at the specification level, learn about configuring API Governance rules.

Learn about viewing security warnings in requests and security rule violations in API specifications.

Turn configured rules on and off

Your team can turn individual security rules on or off to meet your development needs:

To turn a security rule on, select the toggle next to the rule name. You and your team members will see violations for this rule in your API's specification.
To turn a security rule off, select the toggle next to the rule name. You and your team members won't see violations for this rule in your API's specification.