Akto
API discovery and security testing platform.
What it does
Akto builds an inventory of your API endpoints, then runs security tests tailored to APIs — checking for broken authentication and authorization, excessive data exposure, injection, and other issues from the API security top-ten.
What data you get
A catalogue of your API endpoints paired with the vulnerabilities found on each, including which endpoints leak data or allow access they should not.
Why it matters to your site
APIs often expose more than the UI reveals, and their most common flaw — one user reaching another's data — is invisible to page-oriented scanners. This tests for exactly those API-specific failures.
More in this category
Other api tools
Cherrybomb
Audits your API against its own OpenAPI specification.
VulnAPI
Scanner focused on API authentication and access flaws.
Automatic API Attack Tool
Generates and runs attack traffic from your API definition.