Dev tools · alternatives · 2026
24 alternatives to API Security Scanner PRO
#cybersecurity, #api, #developer-tools, #macos
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1
Develop APIs fast + automatically detect endpoints
2025 · fastrequest.apidog.com · its alternatives →
- 2
Generate, edit, lint & test your API workflow in one place
2025 · app.getelva.ai · its alternatives →
- 3
Automagically reverse-engineer REST APIs via capturing traffic - alufers/mitmproxy2swagger
2022 · github.com · its alternatives →
- 4
Free online tool to test APIs and autogenerate documentation
2018 · swagger.io · its alternatives →
- 5OS
tl;dr we released openapi.security, an online tool that performs a dozen of security tests on any given openapi/swagger-based API, with no signup or email required. You can try it here: https://openapi.security My team at Escape (YC W23) is mainly focused on securing GraphQL APIs. For this, we developed a new approach called Feedback driven API Exploration. Basically, we infer the right security tests cases to run using the specification and a carefully crafted in house graph traversal algorithm. (It's a bit long to describe here but we published a more in depth explanation of…
2023 · openapi.security · its alternatives →
- 6
Swagger Editor▲207Beautiful API references from Swagger, OpenAPI spec
2023 · sandbox.scalar.com · its alternatives →
- 7
Bearer CLI▲174Free & open source security scanner for developers
2023 · cycode.com · its alternatives →
- 8
A generator for OpenAPI 3. Contribute to egorsmkv/openapi3-generator development by creating an account on GitHub.
2020 · github.com · its alternatives →
- 9
API Radar▲77We built API Radar to track exposed API keys from OpenAI, Claude, Gemini, and other major providers—in real time—from public GitHub repositories. Why? Leaked AI keys are everywhere. They power bots, cost companies thousands, and even expose user data. But no one had a clean dashboard to see the leaks as they happen — until now. What you’ll find: Full redacted + raw API key leaks Real-time feed of exposed repos Leaderboards by author, repo, and provider Filtering by provider (OpenAI, Claude, Gemini, etc.) Timeline of key exposure trends Built for security researchers, devs, and AI companies…
Jan 2026 · apiradar.live · its alternatives →
- 10BO
Hi HN, we’re the co-founders of Bearer, and today we launch an open-source alternative to code security solutions such as Snyk Code, SonarQube, or Checkmarx. Essentially, we help security & engineering teams to discover, filter and prioritize security risks and vulnerabilities in their codebase, with a unique approach through sensitive data (PII, PD, PHI). Our website is at https://www.bearer.com and our GitHub is here: https://github.com/bearer/bearer We are not originally Security experts but have been software developers and engineering leaders for over 15…
2023 · its alternatives →
- 11
- 12
VibeScan▲9Beta tool that runs OWASP/Nuclei/ZAP checks fast and prioritizes fixes; would love test runs on your staging domains and blunt feedback.
2025 · vibescan.co.kr · its alternatives →
- 13
- 14
I noticed the growing security concerns around MCP (https://news.ycombinator.com/item?id=43600192) and built an open source tool that can detect several patterns of tool poisoning attacks, exfiltration channels and cross-origin manipulations. MCP-Shield scans your installed servers (Cursor, Claude Desktop, etc.) and shows what each tool is trying to do at the instruction level, beyond just the API surface. It catches hidden instructions that try to read sensitive files, shadow other tools' behavior, or exfiltrate data. Example of what it detects: - Hidden instructions…
2025 · github.com · its alternatives →
- 15
- 16
2-min setup. 100% local analysis. OWASP & Secrets detection.
Apr 2026 · apiposture.com · its alternatives →
- 17
Hey HN, TL;DR: We’ve launched a free version of our Shadow IT scanner to identify which SaaS apps are used in your company, who uses them, and if they have high-risk OAuth scopes. Philip and I went through YC with AccessOwl in 2022. We started the company because, in our previous roles, we struggled to track all the SaaS apps, users, and granted OAuth scopes. The Shadow IT scanner started as a small feature within AccessOwl, which manages SaaS vendors and user accounts centrally. But a standalone scanner would have made our lives so much easier in our previous roles. So, we thought, why not…
2024 · accessowl.io · its alternatives →
- 18
I’ve been working on an open-source CLI tool called Dochia for a while now. The reason for building it: in microservices architectures, testing is repetitive: every service exposes APIs, and much of the testing process will share a similar set of test cases: negative inputs, boundary cases, encoding quirks, invisible characters. I wanted a tool that could automate this shared layer of testing instead of doing it manually across dozens of services. So what Dochia does: reads your OpenAPI spec; generates thousands of smart, edge-case payloads automatically and produces detailed reports with…
2025 · github.com · its alternatives →
- 19
Online automated vulnerability scanner to secure firewalls, servers, web applications, and apis. Try 14 days for free.
2020 · hostedscan.com · its alternatives →
- 20
Hello there, I’m Guillaume, the cofounder and CEO of Bearer, a code security startup trying to rethink security products for a developer-first World. 7 months ago we introduced on HN, Bearer CLI (https://github.com/Bearer/bearer), our free and open code security scanner supporting at the time only Ruby and JavaScript applications. We’ve been working very hard with the team, thanks to community feedback to bring tons of new features as well as more language support to become everyone’s go-to code security solution. Just to name a few major features: - Native integration…
2023 · github.com · its alternatives →
- 21
Hi HN! We kept seeing devs get pwned through MCP tools in ways that security scanners completely miss. So we built an open-source analyzer to catch these attacks. Our first OSS by Mighty team. The problem: At Defcon, we saw MCP exploits with 100% success rate against Claude and Llama. Three attack patterns: Hidden Unicode in "error messages" - Paste a colleague's error into Claude, your SSH keys get exfiltrated Trusted tool updates - That database tool you've used for months? Last week's update added credential theft Tool redefinition - Malicious tool redefines "deploy to prod" to run…
2025 · github.com · its alternatives →
- 22
AI all-in-one security scanner for Web, API, and OSINT.
Jul 2026 · github.com · its alternatives →
- 23API 200▲14
I frequently face numerous challenges when working with third-party APIs - error handling, logging, caching, retries, mocking, and more. I spent hours making them work, so I created an app to automate integrations. Currently, the platform offers the following functionality: - Set up services with multiple endpoints: Configure caching, retries, mocking, response transformation, and fallback responses. - Define authentication:- Real-time Swagger/OpenAPI integration: Test your endpoints directly in the browser. - Handy code snippets: Easily copy and paste requests. Feedback needed!
2025 · api200.co · its alternatives →
- 24
An API security workbench for web and Android apps. A browser already routed through the proxy, an Android emulator that already trusts the certificate, and one merged API surface you can export. Free and open source.
22d ago · apiaxess.dev · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →