RapiFuzz APIFuzzer

What RapiFuzz APIFuzzer is

RapiFuzz APIFuzzer is a self-hosted API security tool that sends invalid or unexpected data to API endpoints to uncover vulnerabilities and suggest mitigation. It can identify APIs from web URLs and produce an API software bill of materials for web applications. The tool classifies REST, GraphQL, SOAP, JSON-RPC, and XML-RPC APIs, then fuzzes individual APIs or APIs inside web applications against the OWASP API Security Top 10 editions from 2019 and 2023. Users can add test cases and upload their own payloads. Reports identify vulnerable endpoints, payloads, exploits, recommendations, and mitigation techniques, including custom techniques researched by its in-house team. Listed coverage includes injection attacks, sensitive-data discovery, zero-day discovery, BOLA, BFLA, rate limiting, authentication, authorization, and input validation. It maps vulnerabilities to CWE numbers and can flag suspicious client requests using IP reputation. The maker describes CI/CD, JIRA, Eclipse, and ZAP integrations, plus clientless or agentless on-premise deployment. Pricing is on request, with a 15-day free trial.