security insights

Author: patriciasantaana

src/content/docs/security-center/security-insights/index.mdx

@@ -28,6 +28,9 @@ Listed below are the specific insights currently available:
 | [Domains without HSTS](/ssl/edge-certificates/additional-options/http-strict-transport-security/)                                   | HTTP Strict Transport Security (`HSTS`), is a header which allows a website to specify and enforce security policy in client web browsers. This policy enforcement protects secure websites from downgrade attacks SSL stripping and cookie hijacking. |
 | [Exposed RDP Servers](/cloudflare-one/connections/connect-networks/use-cases/rdp/)                                                  | We detect an RDP server that is exposed to the public Internet.                                                                                                                                                                                        |
 | [Get notified of malicious client-side scripts](/page-shield/detection/configure-alerts/)                                           | We detect that Page Shield alerts are not configured. You will not receive notifications when we detect potential malicious scripts executing in your client-side environment.                                                                         |
+| [Increased body response size detected on API endpoints](/api-shield/management-and-monitoring/endpoint-labels/)                    | Investigate changes, abuse, or successful attacks that may have led to this increase in response body size. |
+| [Increased errors detected on API endpoints](/api-shield/management-and-monitoring/endpoint-labels/)                                | Investigate changes, abuse, or successful attacks that may have led to this increase in errors. |
+| [Increased latency detected on API endpoints](/api-shield/management-and-monitoring/endpoint-labels/)                               | Investigate changes, abuse, or successful attacks that may have led to this increase in response latency. |
 | [Managed Rules not deployed](/waf/managed-rules/reference/cloudflare-managed-ruleset/)                                              | No managed rules deployed on a WAF protected domain.                                                                                                                                                                                                   |
 | [Migrate to new Managed Rules](/waf/reference/migration-guides/waf-managed-rules-migration/)                                        | Migration to new Managed Rules system required for optimal protection.                                                                                                                                                                                 |
 | [Mixed-authentication API endpoints detected](/api-shield/management-and-monitoring/endpoint-labels/#managed-labels)                | Not all of the successful requests against API endpoints carried session identifiers.                                                                                                                                                                  |
@@ -36,6 +39,7 @@ Listed below are the specific insights currently available:
 | [Overprovisioned Access Policies](/cloudflare-one/policies/access/)                                                                 | We detect an Access policy to allow everyone access to your application.                                                                                                                                                                               |
 | [Page Shield not enabled](/page-shield/get-started/)                                                                                | Page Shield helps meet PCI DSS v4.0 compliance regarding requirement 6.4.3.                                                                                                                                                                            |
 | [SPF Record Errors](/dns/manage-dns-records/reference/dns-record-types/#spf)                                                        | We detect an incorrect or missing `SPF` record.                                                                                                                                                                                                        |
+| [Schema Validation missing from eligible API endpoints](/api-shield/security/schema-validation/)                                    | Apply the learned schema to protect your API against fuzzing attacks. |
 | [Sensitive data in API response](/api-shield/management-and-monitoring/#sensitive-data-detection)                                   | Sensitive data in API responses detected.                                                                                                                                                                                                              |
 | [Turn on JavaScript Detection](/bots/reference/javascript-detections/)                                                              | One or more of your Bot Management enabled zones does not have JavaScript Detection enabled, which is a critical part of our bot detection suite.                                                                                                      |
 | [Unassigned Access seats](/cloudflare-one/)                                                                                         | We detect a Zero Trust subscription that is not configured yet.                                                                                                                                                                                        |