Dev tools · alternatives · 2026
24 alternatives to Metlo (YC S21) – An Open Source API Security Tool
Metlo - An Open Source API Security Tool Hey folks! Excited to share what we’ve been working on for the last couple months. Metlo is a self hosted, open source first API security platform that inventories, tests and protects your API endpoints: - We inventory your endpoints by scanning API traffic and detecting all your endpoints along with the sensitive data they contain. - We generate information your security team may find useful like Open API Specs and risk scores for each endpoint. - After this we discover vulnerabilities like unauthenticated endpoints returning sensitive data or…
Metlo is a self-hosted, open source API security platform designed for development and security teams. It scans API traffic to inventory endpoints and identify sensitive data, generates OpenAPI specifications and risk… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Metlo (YC S21) – An Open Source API Security Tool launched in 2022; newer entries below may have overtaken it.
- 1
- 2QC
Hey everyone, excited to share something we’ve been working on the last few months! For context, Metlo is an open source API Security tool[0] we launched here on HN a couple months ago[1]. After working with a few customers over the last couple months, we realized there was a gap in other API testing solutions; especially when it comes to writing security tests. So we decided to completely gut and revamp our testing product - sharing that with you all today! Most Automated API Scanners only find generic vulnerabilities like misconfigured HSTS/CORS Headers and miss vulns specific to your…
2023 · its alternatives →
- 3
Effortlessly discover API behaviour with a Chrome extension that automatically generates OpenAPI specifications in real time for any app or website.
2023 · github.com · its alternatives →
- 4
Apidog▲570Development teams often struggle with using multiple tools like Postman and Swagger for API design, development, and testing. This fragmented approach leads to outdated API specs and chaotic collaboration. So we built Apidog: a single, unified API platform for team collaboration. It has a beautiful interface that makes it easy to create API spec, generate request data from API spec, validate responses, create mock data, orchestrate test scenarios, and publish API documentation. Apidog = Postman + Swagger + Mock + JMeter.
2024 · apidog.com · its alternatives →
- 5
Clobbr▲444Easy API endpoint load testing without breaking the bank
2023 · clobbr.app · its alternatives →
- 6
Anything API▲656Hey HN! We built Notte, a browser infrastructure and agents platform. Many of our users automate UI workflows or extract data from sites that don’t have APIs. In practice, we noticed that once an agent understands how a site works, parts of the task can often run without a browser by interacting with the same network requests the site uses. So we built Anything API: describe a browser task, and our agent explores the site, builds a function, tests it against your description, and deploys a callable REST endpoint. No infra to manage. How the build works: - Describe the task (best results come…
Mar 2026 · anything.notte.cc · its alternatives →
- 7
- 8
- 9
We just released a major upgrade to SigNoz with support for Logs management based on ClickHouse. Would love to get any feedback from the community here on what you think and any questions you may have for us Many big companies like Uber and Cloudflare have been shifting to ClickHouse as their main workhorse for Logs management seeing much better performance. for e.g Cloudflare recently shifted from Elastic to ClickHouse and are seeing 8x improvement in memory/cpu resource requirement in ingestion. This is our first release with Logs support and we have added support for: - Filtering…
2022 · github.com · its alternatives →
- 10
- 11
- 12
- 13
Yaade is an open-source, self-hosted, collaborative API development environment. - EsperoTech/yaade
2022 · github.com · its alternatives →
- 14
SSOReady▲144Open source developer tools for enterprise single sign-on
2024 · github.com · its alternatives →
- 15OS
tl;dr we released openapi.security, an online tool that performs a dozen of security tests on any given openapi/swagger-based API, with no signup or email required. You can try it here: https://openapi.security My team at Escape (YC W23) is mainly focused on securing GraphQL APIs. For this, we developed a new approach called Feedback driven API Exploration. Basically, we infer the right security tests cases to run using the specification and a carefully crafted in house graph traversal algorithm. (It's a bit long to describe here but we published a more in depth explanation of…
2023 · openapi.security · its alternatives →
- 16
Nango (https://github.com/NangoHQ/nango) provides pre-built OAuth flows, secure token storage and automatic refreshes for 40+ APIs and counting. Why we built Nango: We built Nango to solve the pain of accessing OAuth APIs. Despite OAuth being a standard protocol in theory, it remains a major burden to implement it, even with the help of a library. You still need to add endpoints and logic to your app for the server-side dance, implement token refreshes, build & secure your token storage, deal with redirects on the frontend etc. But the worst part is that (almost) every…
2023 · nango.dev · its alternatives →
- 17
- 18
Stop half-done APIs! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by auditing your API specifications, validating them and running API security tests. - blst-security/cherrybomb
2022 · github.com · its alternatives →
- 19
API Radar▲77We built API Radar to track exposed API keys from OpenAI, Claude, Gemini, and other major providers—in real time—from public GitHub repositories. Why? Leaked AI keys are everywhere. They power bots, cost companies thousands, and even expose user data. But no one had a clean dashboard to see the leaks as they happen — until now. What you’ll find: Full redacted + raw API key leaks Real-time feed of exposed repos Leaderboards by author, repo, and provider Filtering by provider (OpenAI, Claude, Gemini, etc.) Timeline of key exposure trends Built for security researchers, devs, and AI companies…
Jan 2026 · apiradar.live · its alternatives →
- 20
- 21Metoro▲146
AI SRE that detects, root causes & auto-fixes K8s incidents
Apr 2026 · metoro.io · its alternatives →
- 22
Our API Management platform is fast, scalable, modern. Including an open source API Gateway, Analytics, Dev Portal and Dashboard
2014 · tyk.io · its alternatives →
- 23
Hey HN! We've developed OpenAPI AutoSpec, a tool for automatically generating OpenAPI specifications from localhost network traffic. It’s designed to simplify the creation of API documentation by just using your website or service, especially useful when you're pressed for time. Documenting endpoints one by one sucks. This project originated from us needing it at our past jobs when building 3rd-party integrations. It acts as a local server proxy that listens to your application’s HTTP traffic and automatically translates this into OpenAPI 3.0 specs, documenting endpoints, requests, and…
2024 · github.com · its alternatives →
- 24
Bearer CLI▲174Free & open source security scanner for developers
2023 · cycode.com · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →