Open Internet by MindsNetHR wants a rewards platform. how do I evaluate the API and security without over-engineering it?