Blessing Agbor is an API Security Engineer with 2 years of experience in application security, specializing in the emerging threat landscape where artificial intelligence meets traditional API vulnerabilities. Operating at the intersection of OWASP API Security Top 10 and OWASP Top 10 for LLM Applications, she addresses the critical security gaps that most organizations miss when deploying AI agents and LLM-powered systems. Her research focuses on cross-framework vulnerability analysis, demonstrating how attackers chain traditional API flaws (BOLA, broken authentication, excessive data exposure) with LLM-specific vulnerabilities (prompt injection, insecure plugins, excessive agency) to achieve complete system compromise. This work emerged from conducting real-world security assessments of AI agent deployments in fintech, e-commerce, and SaaS platforms across multiple continents.

Throughout her career, Blessing has conducted security assessments for organizations and identified 5+ critical vulnerabilities. She holds CompTIA Certs as well as APISEC and actively contributes to the security community through technical blog posts and local security meetups. Based in Lagos, Nigeria, Blessing Agbor is committed to elevating cybersecurity expertise across emerging markets. She believes that advanced security knowledge should be accessible to all practitioners, regardless of geography or organizational size. When not breaking AI agents, she enjoys vlogging, reading books, and documenting her memories.

She has served in technical and leadership roles for major community-led events, including Google Developers Group's Build with AI, DevFest, TechSafe, and STEMCON Tour, and regularly speaks on how security, ethics, and human behavior intersect in tech development. Currently, she’s working on API security projects—deepening her expertise in securing APIs, understanding real-world attack surfaces, implementing threat modeling, and integrating security seamlessly into CI/CD pipelines. Her focus is on building resilient, developer-friendly security workflows that align with modern DevSecOps practices.