Security tools and references for testing REST, GraphQL, SOAP, and other APIs, covering authentication flaws, authorization bypass, rate limiting, and API-specific vulnerabilities.

Vulnetic AI is a high-performance hacking agent built for serious penetration testing at a fraction of typical costs.

Aikido is a security platform for code and cloud, designed to automatically find and fix vulnerabilities in one central system.

Arjun is an HTTP parameter discovery suite to find valid web parameters and uncover hidden endpoints.