Category

Autonomous security research framework that turns Claude Code into an agent for adversarial code analysis, fuzzing, and exploit generation.

AI-driven pentesting platform automating hacker intuition to find vulnerabilities before exploits, reducing discovery costs.

AI-infused API Security solution for the entire API lifecycle, from discovery and posture management to threat protection, including AI Agents.

Schemathesis is a tool that automatically generates API tests from OpenAPI and GraphQL schemas to find bugs.

Offline security checklist & report generator with 200+ tests across web, cloud, WiFi, firmware, and AI security domains.

Agentic AI-powered continuous penetration testing as a service (PTaaS) platform that combines AI scale with human supervision.

Titus is a high-performance secrets scanner that detects and validates leaked credentials in code, binaries, and HTTP traffic for offensive engagements.

Webhook.site allows red teams to capture and inspect HTTP requests in real-time. It is essential for testing blind OOB vulnerabilities and exfiltration.

WuppieFuzz: coverage-guided REST API fuzzer using LibAFL, easy-to-use, explainable flaws, modular, supports black/grey/white box testing.

crAPI is a completely ridiculous API vulnerable by design, built on a microservices architecture, designed to help understand API security risks.

Graphw00f is a GraphQL server engine fingerprinting tool. It identifies backend technologies and security defenses by analyzing unique endpoint responses.