cerberauth/vulnapi

Autoswagger by Intruder - detect API auth weaknesses

Metlo is an open-source API security platform.

API Pentesting Tools are specialized security tools used to test and analyze the security of Application Programming Interfaces (APIs).

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

Burp Suite extension for API security testing with 15 attack types, 108+ payloads, intelligent fuzzing, BOLA/IDOR detection, AI integration, and automated reconnaissance. Supports REST/GraphQL/SOAP APIs with Nuclei, Turbo Intruder, and external tool integration. OWASP API Top 10 coverage.

Local-first AI red team for web, API, and LLM application security. Attacker-style reasoning, evidence-backed findings, and skills for AI coding agents.

Open-source, self-hosted web pentesting suite with agentic scanning, analyst tools, API testing, model checkpoints and MCP integrations.

Vulnerable REST API with OWASP top 10 vulnerabilities for security testing

Autonomous AI-powered security scanner — multi-agent vulnerability detection, exploitation, and validation engine