AppSecNews

API Security

API Discovery and Protection

Inventory APIs, test their authorization logic, and watch runtime traffic for abuse.

9 tools profiled

How it differs Discovers, tests and protects APIs specifically, often working from the OpenAPI contract or live traffic. General web scanning of the same endpoints is DAST.

License
Subcategory
Deployment
Languages
Integrations
Maturity
Signals
Clear

2 tools match

Active Jenkins Clear all

  • 42Crunch

    42Crunch

    API Security

    API security platform built around the OpenAPI contract, auditing definitions, scanning live endpoints for conformance, and enforcing the schema at runtime.

    Commercial, free tier +1
    Established

  • APIsec

    APIsec.ai

    API Security

    Automated API penetration testing that generates role aware test cases from a specification to probe authorization and business logic flaws.

    Freemium
    Growing

  • 42Crunch

    42Crunch

    API security platform built around the OpenAPI contract, auditing definitions, scanning live endpoints for conformance, and enforcing the schema at runtime.

    Commercial, free tier +1 Established
    API Security

  • APIsec

    APIsec.ai

    Automated API penetration testing that generates role aware test cases from a specification to probe authorization and business logic flaws.

    Freemium Growing
    API Security
Tick up to 4 tools above.