Dev tools · alternatives · 2026

24 alternatives to Devunus - Open API Audit
Free security analysis for API specifications
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1

Effortlessly discover API behaviour with a Chrome extension that automatically generates OpenAPI specifications in real time for any app or website.
2023 · github.com · its alternatives →
- 2

Hey, I'm Martyn and I recently joined Zuplo. OpenAPI is a huge part of what we do, but getting a document up to scratch out of the gate, especially if you're not super well versed in the actual specification and what you should use and when. So we built a suite of tools to help with this called Rate My OpenAPI. It will score your OpenAPI document out of 100, as well as giving you individual scores in 4 key areas; completeness, SDK generation, security and documentation. Along with the score, you also get details of what the issues, or errors are, as well as guidance on what they actually…
2024 · github.com · its alternatives →
- 3
OpenStatus▲434Hey HN! We’re Max and Thibault building OpenStatus.dev an OpenSource synthetic monitoring platform with incident managements 1 min demo: https://twitter.com/mxkaske/status/1685666982786404352 We have just reached 2000 stars on GitHub https://github.com/openstatusHQ/openstatus We are really excited to hear your feedback/questions and connect further: our emails are [email protected] and [email protected]. Thank you!
2025 · openstatus.dev · its alternatives →
- 4

Generate, edit, lint & test your API workflow in one place
2025 · app.getelva.ai · its alternatives →
- 5

Develop APIs fast + automatically detect endpoints
2025 · fastrequest.apidog.com · its alternatives →
- 6OS
tl;dr we released openapi.security, an online tool that performs a dozen of security tests on any given openapi/swagger-based API, with no signup or email required. You can try it here: https://openapi.security My team at Escape (YC W23) is mainly focused on securing GraphQL APIs. For this, we developed a new approach called Feedback driven API Exploration. Basically, we infer the right security tests cases to run using the specification and a carefully crafted in house graph traversal algorithm. (It's a bit long to describe here but we published a more in depth explanation of…
2023 · openapi.security · its alternatives →
- 7

- 8
Secure Audit Log▲272Log important application events with a single line of code
2023 · pangea.cloud · its alternatives →
- 9

Hey HN! We've developed OpenAPI AutoSpec, a tool for automatically generating OpenAPI specifications from localhost network traffic. It’s designed to simplify the creation of API documentation by just using your website or service, especially useful when you're pressed for time. Documenting endpoints one by one sucks. This project originated from us needing it at our past jobs when building 3rd-party integrations. It acts as a local server proxy that listens to your application’s HTTP traffic and automatically translates this into OpenAPI 3.0 specs, documenting endpoints, requests, and…
2024 · github.com · its alternatives →
- 10

Develop faster, eliminate complexity, protect your secrets
2022 · 1password.com · its alternatives →
- 11
Generate and share OpenAPI specs with AI
2025 · api.dev · its alternatives →
- 12

- 13

- 14
Bearer CLI▲174Free & open source security scanner for developers
2023 · cycode.com · its alternatives →
- 15

- 16

A curated list of free OSS developer-first security tools
2022 · its alternatives →
- 17

Stop half-done APIs! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by auditing your API specifications, validating them and running API security tests. - blst-security/cherrybomb
2022 · github.com · its alternatives →
- 18

A generator for OpenAPI 3. Contribute to egorsmkv/openapi3-generator development by creating an account on GitHub.
2020 · github.com · its alternatives →
- 19

- 20

Black-box fuzzer that fuzzes APIs based on OpenAPI specification. Find bugs for free! - matusf/openapi-fuzzer
2021 · github.com · its alternatives →
- 21

I’ve been working on an open-source CLI tool called Dochia for a while now. The reason for building it: in microservices architectures, testing is repetitive: every service exposes APIs, and much of the testing process will share a similar set of test cases: negative inputs, boundary cases, encoding quirks, invisible characters. I wanted a tool that could automate this shared layer of testing instead of doing it manually across dozens of services. So what Dochia does: reads your OpenAPI spec; generates thousands of smart, edge-case payloads automatically and produces detailed reports with…
2025 · github.com · its alternatives →
- 22
APImetrics▲72Simple, powerful, secure API performance monitoring
2021 · apicontext.com · its alternatives →
- 23WT
2016 · android.fallible.co · its alternatives →
- 24

I built this after seeing multiple teams accidentally ship API keys in their frontend code. The problem: Modern web development moves fast. You're vibe-coding, shipping features, and suddenly your AWS keys are sitting in a tag visible to anyone who opens DevTools. I've personally witnessed this happen to at least 3-4 production apps in the past year alone. KeyLeak Detector runs through your site (headless browser + network interception) and checks for 50+ types of leaked secrets: AWS/Google keys, Stripe tokens, database connection strings, LLM API keys (OpenAI, Claude, etc.), JWT…
Nov 2025 · github.com · its alternatives →
Also compare
- OpenAPI DevTools – Chrome extension that generates an API spec alternatives
- We made a tool to help developers improve OpenAPI specs alternatives
- OpenStatus alternatives
- Cursor for your API alternatives
- Apidog Fast Request alternatives
- Openapi.security, a fast security checker for REST-based API alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →