API testing types explained: contract, integration, load and security tests compared
Our API had 1,400 tests and still shipped a breaking field rename, a 40-second p99 under load and an object-level authorization hole. Each one belonged to a test type we were not running. This is the map we now use: which API test type catches which failure, with a small example of each.