I have an API that can’t rely on user authentication, yet I want to secure it against unauthorized access and misuse. What are some alternative security measures I can implement, such as IP whitelisting, rate limiting, or using API tokens, even without authentication?
Examples of how to strengthen API security without authentication would be very useful.