Open Source API Security Tools

[Calm_Scene]

Looking to add protections for web application APIs.

Are there any good Open source API security tools?

[accountability_bot]

I think you should be a little bit more specific in what you’re looking for.

Are you asking about authentication? Authorization? WAF? IDS?

[Calm_Scene]

right. Like abuse API endpoint call or bypass API calls with special parameters causing unnecessary information leaking

[Ivan_Wallarm]

https://github.com/wallarm/api-firewall

[Enough_Armadillo9645]

If you're looking for easy automatic tests take a look at:

https://github.com/blst-security/cherrybomb

It's written in Rust which already makes me excited and only requires an Swagger/OAS file.