SecurityScorecard Interview Question

Let's say our API system does not work well what will you do to find the problem?