Clear recommendation: As often as it makes sense - for example at launch, relaunch,
significant changes to the code, server moves or changes to the API structure. Most
customers test their API once a year. We recommend something like Pentest as a Service in
order to be able to intervene selectively.