nowfound

Dev tools · alternatives · 2026

24 alternatives to Devunus - Open API Audit

Free security analysis for API specifications

Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.

  1. 1

    Effortlessly discover API behaviour with a Chrome extension that automatically generates OpenAPI specifications in real time for any app or website.

    2023 · github.com · its alternatives →

  2. 2

    Hey, I'm Martyn and I recently joined Zuplo. OpenAPI is a huge part of what we do, but getting a document up to scratch out of the gate, especially if you're not super well versed in the actual specification and what you should use and when. So we built a suite of tools to help with this called Rate My OpenAPI. It will score your OpenAPI document out of 100, as well as giving you individual scores in 4 key areas; completeness, SDK generation, security and documentation. Along with the score, you also get details of what the issues, or errors are, as well as guidance on what they actually…

    2024 · github.com · its alternatives →

  3. 3

    Hey HN! We’re Max and Thibault building OpenStatus.dev an OpenSource synthetic monitoring platform with incident managements 1 min demo: https://twitter.com/mxkaske/status/1685666982786404352 We have just reached 2000 stars on GitHub https://github.com/openstatusHQ/openstatus We are really excited to hear your feedback/questions and connect further: our emails are [email protected] and [email protected]. Thank you!

    2025 · openstatus.dev · its alternatives →

  4. 4

    Generate, edit, lint & test your API workflow in one place

    2025 · app.getelva.ai · its alternatives →

  5. 5

    Develop APIs fast + automatically detect endpoints

    2025 · fastrequest.apidog.com · its alternatives →

  6. 6OS

    tl;dr we released openapi.security, an online tool that performs a dozen of security tests on any given openapi/swagger-based API, with no signup or email required. You can try it here: https://openapi.security My team at Escape (YC W23) is mainly focused on securing GraphQL APIs. For this, we developed a new approach called Feedback driven API Exploration. Basically, we infer the right security tests cases to run using the specification and a carefully crafted in house graph traversal algorithm. (It's a bit long to describe here but we published a more in depth explanation of…

    2023 · openapi.security · its alternatives →

  7. 7

    Open source API security platform

    2022 · metlo.com · its alternatives →

  8. 8

    Log important application events with a single line of code

    2023 · pangea.cloud · its alternatives →

  9. 9

    Hey HN! We've developed OpenAPI AutoSpec, a tool for automatically generating OpenAPI specifications from localhost network traffic. It’s designed to simplify the creation of API documentation by just using your website or service, especially useful when you're pressed for time. Documenting endpoints one by one sucks. This project originated from us needing it at our past jobs when building 3rd-party integrations. It acts as a local server proxy that listens to your application’s HTTP traffic and automatically translates this into OpenAPI 3.0 specs, documenting endpoints, requests, and…

    2024 · github.com · its alternatives →

  10. 10

    Develop faster, eliminate complexity, protect your secrets

    2022 · 1password.com · its alternatives →

  11. 11

    Generate and share OpenAPI specs with AI

    2025 · api.dev · its alternatives →

  12. 12
    BugDazz▲10

    Shift API Security Left

    2024 · securelayer7.net · its alternatives →

  13. 13
    TrAPI▲29

    API Security Simplified!

    2025 · linkedin.com · its alternatives →

  14. 14

    Free & open source security scanner for developers

    2023 · cycode.com · its alternatives →

  15. 15
    ApiHome▲73

    Home of API testing

    2022 · apihome.io · its alternatives →

  16. 16

    A curated list of free OSS developer-first security tools

    2022 · its alternatives →

  17. 17

    Stop half-done APIs! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by auditing your API specifications, validating them and running API security tests. - blst-security/cherrybomb

    2022 · github.com · its alternatives →

  18. 18

    A generator for OpenAPI 3. Contribute to egorsmkv/openapi3-generator development by creating an account on GitHub.

    2020 · github.com · its alternatives →

  19. 19

    Reliable uptime and performance monitoring for your services

    2019 · its alternatives →

  20. 20

    Black-box fuzzer that fuzzes APIs based on OpenAPI specification. Find bugs for free! - matusf/openapi-fuzzer

    2021 · github.com · its alternatives →

  21. 21

    I’ve been working on an open-source CLI tool called Dochia for a while now. The reason for building it: in microservices architectures, testing is repetitive: every service exposes APIs, and much of the testing process will share a similar set of test cases: negative inputs, boundary cases, encoding quirks, invisible characters. I wanted a tool that could automate this shared layer of testing instead of doing it manually across dozens of services. So what Dochia does: reads your OpenAPI spec; generates thousands of smart, edge-case payloads automatically and produces detailed reports with…

    2025 · github.com · its alternatives →

  22. 22

    Simple, powerful, secure API performance monitoring

    2021 · apicontext.com · its alternatives →

  23. 23WT
  24. 24

    I built this after seeing multiple teams accidentally ship API keys in their frontend code. The problem: Modern web development moves fast. You're vibe-coding, shipping features, and suddenly your AWS keys are sitting in a tag visible to anyone who opens DevTools. I've personally witnessed this happen to at least 3-4 production apps in the past year alone. KeyLeak Detector runs through your site (headless browser + network interception) and checks for 50+ types of leaked secrets: AWS/Google keys, Stripe tokens, database connection strings, LLM API keys (OpenAI, Claude, etc.), JWT…

    Nov 2025 · github.com · its alternatives →

Also compare

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →