Postman Blog
blog.postman.com · Company blog · on HN since 2020
Official blog of Postman, the API development tool company, covering product releases, pricing changes, and security notices.
What HN saysHN links it for Postman's responses to criticism of its free plan and cloud sync, and for its statement on the npm supply-chain attack.
47HN people shared it
4linked it in comments
56stories submitted
593story points
4 months agolast shared
2020people per year2026
Most-shared posts
- 12021 Postman Plans and Pricing Updates3 people · 7 points · first shared 2021 · discussion on HN
- 2Postman to limit Free plan from 3 users to 13 people · 4 points · first shared 2026 · 1 comments on HN
- 3Storage Challenges in the Evolution of Database Architecture3 people · 3 points · first shared 2023 · discussion on HN
- 4Postman launches v11 to supercharge development with AIs and APIs2 people · 13 points · first shared 2024 · 2 comments on HN
- 5Postman raises $150M Series C at $2B valuation2 people · 9 points · first shared 2020 · 1 comments on HN
- 6Postman removes collections for users without an account (a.k.a. Scratch Pad)2 people · 3 points · first shared 2023 · discussion on HN
- 7The New Postman Is Here: AI-Native and Built for the Agentic Era2 people · 2 points · first shared 2026 · discussion on HN
- 8Postman Now Supports gRPC1 people · 409 points · first shared 2022 · 211 comments on HN
- 9Postman raises $225M Series D at $5.6B valuation1 people · 53 points · first shared 2021 · 68 comments on HN
- 10Postman Has Acquired Orbit1 people · 13 points · first shared 2024 · 9 comments on HN
- 11Postman acquires Akita for automated API observability1 people · 10 points · first shared 2023 · 1 comments on HN
- 12Postman Desktop App’s New User Interface1 people · 5 points · first shared 2021 · discussion on HN
- 13Escape API Security (YC W23) Partners with Postman on Open Source (GraphMan)1 people · 5 points · first shared 2023 · 1 comments on HN
- 14How to Choose HTTP or gRPC for Your Next API1 people · 3 points · first shared 2022 · discussion on HN
- 15The Power of Platform API Governance for Enterprises1 people · 3 points · first shared 2022 · discussion on HN
What HN people wrote when they linked it
stepquiet · 2025-11-24
Postman posted a blog entry about the event: https://blog.postman.com/engineering/shai-hulud-2-0-npm-supply-chain-a…
"Our security engineering team is investigating the matter and thus far has concluded that while some public Postman NPM packages were infected, (1) Postman as an app is not compromised, and (2) our production cloud services are also not compromised."
a85 · 2025-10-21
Yes. The post is misleading and we have more detail on what we do here.
https://blog.postman.com/engineering/postman-free-is-secure-by-design/
Postman allows for turning off history, keeping variables local, setting up a local vault all in the free product and in more advanced plans, there are secret scanning capabilities for IT and security teams.
https://blog.postman.com/choose-the-right-postman-plan-for-your-organi…
These issues are not unique to Postman and apply to all cloud products like GitHub as an instance. Products that are “offline” just shift the burden to the user.
dyme13 · 2021-09-08
Hasn't sync been around since 2015? https://blog.postman.com/postman-2-0-with-sync-is-here/
This is not a new problem with recent versions - it's always been a problem as far as I can tell.
dbg31415 · 2024-08-23
So many good lists out there to just copy off of...
https://blog.postman.com/what-are-http-headers/
https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Shee…
https://www.geeksforgeeks.org/http-headers/