API Analyser

An API security analysis tool automates extensive vulnerability assessments by parsing OpenAPI or Swagger specifications to identify all endpoints, methods, parameters, and schemas, then performs multiple security checks aligned with OWASP API Top 10 categories to identify potential vulnerabilities such as broken authentication, authorization flaws, or security misconfigurations. Its main features include extensive attack surface discovery, customizable security checks, integration with AI models for enriched analysis, flexible reporting formats (PDF, HTML, JSON, SARIF), and seamless integration into CI/CD pipelines with the ability to set security thresholds that can block pull requests, making it ideal for security analysts, developers, and organizations aiming to ensure API robustness, compliance, and secure deployment in a self-hosted, open-source environment.

API Analyser 可以在以下位置找到： Application Security Testing (SAST/DAST) 类别。