API Vulnerability Scanner

How our API Vulnerability Scanner runs precision scans

‍Spec file parsing for more accurate API security testing

Our online API Vulnerability Scanner parses the API specification files to understand its expected input parameters and how it works. Based on these details, the scanner customizes tests for a deeper, more thorough security assessment.

Robust scanning engine with detection for new vulnerabilities

The API Scanner uses the same engine as our powerful, custom Website Vulnerability Scanner. Both tools pack a wide range of detectors for comprehensive security assessments against any type of web application. A team of 9 engineers constantly develop new scanning capabilities for it.

Flexible authentication options for deep API security scans

Authenticating requests during the API scan is easy: just set the appropriate header with the authentication information (e.g. Authorization: Basic Authkey, or Authorization: Bearer JWTToken). The API Vulnerability Scanner supports header authentication through common methods, like Basic Authorization headers, and more complex ones, such as JWT tokens.