APIscan supports OAuth 2.0, Bearer, mTLS, and API key authentication, generates realistic requests, runs scans in parallel, and offers optional AI-assisted review.

APIsec.ai stands out for its automated and continuous API security testing, which proactively detects vulnerabilities before they can be exploited. It seamlessly integrates into development workflows, …

Nov 19, 2025 · Find and report API vulnerabilities ranging from SQLi and SSRF to Local File Inclusion, Code Injection, and Request URL override. Paid plans give you access to its full capabilities, plus …

Levo is an API security platform focused on automated API discovery, continuous runtime detection, and exploit-aware API security testing to identify and remediate risks across the API lifecycle.

By using this tool, you can detect and mitigate security vulnerabilities in your APIs before they are exploited by attackers. Before making your first scan with VulnAPI, you have to download and install …

APIsec Free scans APIs and identifies vulnerability to automated, malicious attacks without authentication. Automatically scans the environment to uncover APIs, endpoints, parameters and …

An API scanner simulates the activities of a remote attacker to identify vulnerabilities such as information disclosure, injection issues, broken authentication, misconfigurations, and more.

Apr 2, 2026 · Discover the top API security testing tools with features like API endpoint scanning, vulnerability assessment, and threat modelling.

Mar 9, 2026 · Cloudflare’s new Web and API Vulnerability Scanner helps teams proactively find logic flaws. By using AI to build API call graphs, we identify vulnerabilities that standard defensive tools miss.

May 23, 2025 · In simpler terms, an API scanner acts like a security probe for your APIs – calling your API methods with both normal and malformed data – to see if it can break anything or access …