VulnAPI
Scanner focused on API authentication and access flaws.
What it does
VulnAPI probes your API's authentication and authorization handling — testing token validation, session behaviour, and access controls — to find weaknesses that would let a request act with more privilege than it should.
What data you get
A list of authentication and access-control findings, each showing the endpoint, the weakness, and the request that demonstrates it.
Why it matters to your site
Broken authorization is the number-one API risk. This concentrates on that class of flaw, giving you a clear read on whether your API properly enforces who can do what.
More in this category
Other api tools
Akto
★ FeaturedAPI discovery and security testing platform.
Cherrybomb
Audits your API against its own OpenAPI specification.
Automatic API Attack Tool
Generates and runs attack traffic from your API definition.