One of the topics I am currently working on is the testing of APIs on the security level, e.g. as integration in SOAPUI and OWASP in WSO2. The integration of SOAPUI and WSO2 is set up and also works. Unfortunately I haven't found a reasonable manual to help me with the point OWASP ZAP on REST API level.
OWASP currently offers only this information which does not help me. In the further references which I link here, this topic is not talked past but no corresponding solution is offered.
Do you have tips on Soap UI or REST API Penetration Test or SoapUI Security Checks, or articles or helpful information on how I could integrate them?