Pentest-Tools.com API Scanner

Name: Pentest-Tools.com API Scanner
Price: 95 USD

Visit site Alternatives

Score7.1

Rank#2 of 29

From$95/mo

Free planNo

Free trialYes

Runs onAPI, Linux, macOS, Web

Summary

Pentest-Tools.com API Scanner is a cloud tool for assessing APIs and detecting vulnerabilities such as SQL injection, SSRF, local file inclusion, code injection, and request URL override. It supports REST and GraphQL APIs, plus Postman Collections, and accepts OpenAPI 2 and 3 specifications in YAML, YML, or JSON. Authenticated scans can use request headers, including Basic Authorization and JWT tokens. Reports include risk summaries, vulnerability evidence, remediation advice, and a list of more than 40 tests. Depending on the plan, exports can be PDF, HTML, CSV, XLSX, or editable DOCX. Integrations listed include Jira, Slack, Microsoft Teams, Discord, webhooks, Nucleus, Vanta, Burp Suite, AWS, Azure Marketplace, GitHub Actions, and a REST API. A free plan is available, and paid plans start at $95 per month; API scanning is limited in NetSec and included in WebNetSec. The seven-day trial requires a business email and card, and costs nothing if canceled before day eight.

Who it is for

This scanner is aimed at penetration testers and other information security professionals, including offensive and defensive security teams. It may also suit system builders or administrators assessing APIs.

What is good

Supports REST, GraphQL, and Postman Collections.
Authenticated scans can use Basic Authorization or JWT.
Reports include evidence and remediation advice.
Lists more than 40 tests.
Offers several report export formats, depending on plan.

What to know first

Seven-day trial requires a business email and card.
API scanning is limited in NetSec.
Reports are deleted 30 days after generation.
Pricing varies by asset count and billing cycle.

Verdict

The scanner covers common API formats and authenticated assessments, with evidence and remediation details in reports. Compare plan limits before choosing, especially if API scanning is central to the work.

Pentest-Tools.com API Scanner plans and pricing

All plans

NetSec $95/mo From $95/month with 5 assets; price varies by asset count and billing cycle. Network scanning · cloud scanning · password auditing · reconnaissance · limited web and API scanning pentest-tools.com · 29 Sept 2026

WebNetSec $140/mo From $140/month with 5 assets; price varies by asset count and billing cycle. Everything in NetSec · DAST · authenticated web scans · REST and GraphQL API scanning · CMS scanning pentest-tools.com · 29 Sept 2026

Pentest Suite $190/mo From $190/month with 5 assets; price varies by asset count and billing cycle. Everything in WebNetSec · automated CVE exploitation · SQL injection and XSS exploiters · pentest report generator pentest-tools.com · 29 Sept 2026

Compared on web application security scanners

Free plan: Yespentest-tools.com
Paid from: $95/mopentest-tools.com
API discovery: Nopentest-tools.com
Authentication testing: Yespentest-tools.com
Input-validation testing: Yespentest-tools.com
Deployment: cloudpentest-tools.com
API formats: OpenAPI 2 and 3 in YAML, YML, or JSON; Postman Collectionpentest-tools.com

Facts

Purpose: The online API Vulnerability Scanner assesses APIs and detects vulnerabilities including SQL injection, SSRF, local file inclusion, code injection, and request URL override.pentest-tools.com · 29 Sept 2026
Supported APIs: The scanner works on REST APIs, GraphQL APIs, and Postman Collections.pentest-tools.com · 29 Sept 2026
Specification support: It supports OpenAPI versions 2 and 3 in YAML, YML, and JSON formats.pentest-tools.com · 29 Sept 2026
Authentication: Authenticated scans can use request headers with methods including Basic Authorization and JWT tokens.pentest-tools.com · 29 Sept 2026
Reports: Reports include risk summaries, vulnerability evidence, remediation advice, and a list of 40+ tests; exports vary by plan and include PDF, HTML, CSV, XLSX, or editable DOCX.pentest-tools.com · 29 Sept 2026
Trial terms: The full scanner trial lasts 7 days, requires a business email and card, and costs nothing if canceled before day 8.pentest-tools.com · 29 Sept 2026
Integrations: The platform lists Jira, Slack, Microsoft Teams, Discord, webhooks, Nucleus, Vanta, Burp Suite, AWS, Azure Marketplace, GitHub Actions, and a REST API among its integrations.pentest-tools.com · 29 Sept 2026
Security certification and privacy: PentestTools SA says it is certified to ISO/IEC 27001:2023 and processes customer data under GDPR.pentest-tools.com · 29 Sept 2026
Data protection: The company says customer data is encrypted at rest with AES-256 and in transit with TLS 1.2+, and reports are automatically deleted 30 days after generation.pentest-tools.com · 29 Sept 2026
Hosting and residency: The product runs in Hetzner and Linode data centers in the EU, UK, Iceland, and US; new customers can choose US or Europe data hosting.pentest-tools.com · 29 Sept 2026
Plan limits: Pricing states that API scanning is limited in NetSec and included in WebNetSec, while all plans include API access and unlimited scans on assets.pentest-tools.com · 29 Sept 2026