User Activity

Hello Experts,Can you help me to understand the difference between APIs and webhook triggers.What kind of security cab be added if we use API and webhook as trigger.