4
Beagle Security
Beagle Security is an agentic AI penetration testing platform for web applications, APIs, and GraphQL.
Free planWebAPI
6.9From $99 a month
Visit
5
StackHawk HawkScan
StackHawk HawkScan is a dynamic application security testing scanner for web applications and APIs.
WebAPILinuxmacOS
6.8From $10 a month
Visit
6
AquilaX API Security Scanner
AquilaX API Security Scanner checks APIs by analyzing their specifications and probing running endpoints.
Free planWebAPIExtensionSelf-hosted
6.7From $19 a month
Visit
7
Parasoft SOAtest
Parasoft SOAtest automates functional, security, and performance testing for APIs and microservices.
AndroidiOSAPILinux
6.7
Visit
8
ZeroThreat
ZeroThreat is an AI-powered penetration-testing platform for web applications and APIs, available through web and API access.
Free planWebAPI
6.7From $100 a month
Visit
9
Indusface WAS
Indusface WAS is a cloud-based web application security scanner using dynamic application security testing to identify vulnerabilities.
Web
6.6From $599 a year
Visit
10
Bright Security DAST
Bright Security DAST is a dynamic application security testing tool offered as SaaS.
WebAPILinuxmacOS
6.5
Visit
11
Pentest-Tools.com API Scanner
Pentest-Tools.com API Scanner is a cloud tool for assessing APIs and detecting vulnerabilities such as SQL injection, SSRF, local file inclusion,…
WebAPILinuxmacOS
6.5From $95 a month
Visit
12
PurpleTeam
PurpleTeam is a command-line tool and service for dynamic application security testing of web applications and APIs.
Free planAPISelf-hosted
6.4From $85 a month
Visit
13
Schemathesis
Schemathesis generates property-based tests from OpenAPI and GraphQL schemas to help engineers find API bugs.
Free planLinuxmacOSSelf-hostedWindows
6.4Free plan
Visit
14
ApyGuard API Security Scanner
ApyGuard API Security Scanner checks authenticated APIs before release for authorization problems, OWASP API Security Top 10 risks, and business-logic issues.
WebExtensionSelf-hosted
6.2From $129 a month
Visit
15
Automatic API Attack Tool
Automatic API Attack Tool is a free, open-source tool that generates and runs tests from an API specification.
Free planLinuxWindows
6.2Free plan
Visit
16
Pentestas API Scanner
Pentestas API Scanner examines live APIs, Swagger or OpenAPI specifications, and JWT claims for security weaknesses.
WebAPI
6.2From $948 a year
Visit
17
Pynt
Pynt tests API security by examining API traffic and creating simulated attacks to find vulnerabilities.
Free planWebAPILinuxSelf-hosted
6.1Free plan
Visit
18
Akto API Security Platform
WebAPILinuxSelf-hosted
6.0
Visit
19
Equixly
Equixly is a paid API and application security platform that uses AI agents to discover, attack, and validate exploitable risks in running systems.
WebAPI
6.0€4,999 one-time
Visit
20
VulnAPI
VulnAPI is a free, open-source dynamic application security testing tool for scanning APIs for vulnerabilities and security risks.
Free planLinuxmacOSSelf-hostedWindows
6.0Free plan
Visit
21
Levo.ai
Levo.ai is a runtime security platform for API and AI applications.
WebAPIExtensionLinux
5.7
Visit
22
Escape
Escape is an offensive security platform that brings together attack surface management, business-logic-aware dynamic application security testing…
WebAPI
5.5
Visit
23
Operator
Operator is an autonomous API penetration testing agent that parses an OpenAPI or Swagger specification, enumerates documented operations, and tests them.
Web
5.5
Visit
24
GraphQL-Cop
GraphQL-Cop is a free Python utility for checking GraphQL APIs for common security issues, including as part of CI/CD checks.
LinuxmacOSSelf-hostedWindows
5.4
Visit
25
RapiFuzz APIFuzzer
RapiFuzz APIFuzzer is a self-hosted API security tool that sends invalid or unexpected data to API endpoints to uncover vulnerabilities and suggest mitigation.
Self-hosted
5.4
Visit
26
RESTler
LinuxmacOSWindows
4.9
Visit

Back to OWASP API Security Testing Framework