VulnAPI
Scanner focused on API authentication and access flaws.
What it does
VulnAPI probes your API's authentication and authorization handling, testing token validation, session behaviour, and access controls, to find weaknesses that would let a request act with more privilege than it should.
What data you get
A list of authentication and access-control findings, each showing the endpoint, the weakness, and the request that demonstrates it.
Why it matters to your site
Broken authorization is the number-one API risk. This concentrates on that class of flaw, giving you a clear read on whether your API properly enforces who can do what.
More in this category
Other api tools
Akto
★ FeaturedAPI discovery and security testing platform.
Cherrybomb
Audits your API against its own OpenAPI specification.
Automatic API Attack Tool
Generates and runs attack traffic from your API definition.