Dev tools · alternatives · 2026
24 alternatives to Quickly Create Security Tests for All Your APIs (YC S21)
Hey everyone, excited to share something we’ve been working on the last few months! For context, Metlo is an open source API Security tool[0] we launched here on HN a couple months ago[1]. After working with a few customers over the last couple months, we realized there was a gap in other API testing solutions; especially when it comes to writing security tests. So we decided to completely gut and revamp our testing product - sharing that with you all today! Most Automated API Scanners only find generic vulnerabilities like misconfigured HSTS/CORS Headers and miss vulns specific to your…
Metlo is an open source API security tool that helps developers quickly create security tests across all their API endpoints. Rather than relying on generic vulnerability scanners or manually writing tests in other… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Quickly Create Security Tests for All Your APIs (YC S21) launched in 2023; newer entries below may have overtaken it.
- 1
Metlo - An Open Source API Security Tool Hey folks! Excited to share what we’ve been working on for the last couple months. Metlo is a self hosted, open source first API security platform that inventories, tests and protects your API endpoints: - We inventory your endpoints by scanning API traffic and detecting all your endpoints along with the sensitive data they contain. - We generate information your security team may find useful like Open API Specs and risk scores for each endpoint. - After this we discover vulnerabilities like unauthenticated endpoints returning sensitive data or…
2022 · github.com · its alternatives →
- 2
- 3
Apidog▲570Development teams often struggle with using multiple tools like Postman and Swagger for API design, development, and testing. This fragmented approach leads to outdated API specs and chaotic collaboration. So we built Apidog: a single, unified API platform for team collaboration. It has a beautiful interface that makes it easy to create API spec, generate request data from API spec, validate responses, create mock data, orchestrate test scenarios, and publish API documentation. Apidog = Postman + Swagger + Mock + JMeter.
2024 · apidog.com · its alternatives →
- 4
Effortlessly discover API behaviour with a Chrome extension that automatically generates OpenAPI specifications in real time for any app or website.
2023 · github.com · its alternatives →
- 5
Clobbr▲444Easy API endpoint load testing without breaking the bank
2023 · clobbr.app · its alternatives →
- 6
Your playground for writing custom API security tests
2023 · akto.io · its alternatives →
- 7
- 8
- 9
Generate, edit, lint & test your API workflow in one place
2025 · app.getelva.ai · its alternatives →
- 10
Signadot▲187Hi again HN, we’re Arjun and Anirudh, founders of Signadot (YC W20). Signadot helps teams developing microservices test their changes using lightweight environments called “Sandboxes”. We use a relatively new approach, using traffic labeling (using OpenTelemetry) and request routing (using a Service Mesh) to isolate environments in a shared Kubernetes cluster. Today, we’re launching a new feature to help developers with local testing of microservices during the iterative development process. When we initially launched in September last year…
2022 · signadot.com · its alternatives →
- 11
- 12
Heyhack Scan▲271SaaS pen-testing that surpasses the level of ethical hackers
2022 · auth.heyhack.com · its alternatives →
- 13
Beautiful, cross-platform & open-source tools for debugging, testing and building with HTTP(S), on Windows, Linux & Mac.
2019 · httptoolkit.tech · its alternatives →
- 14
Stop half-done APIs! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by auditing your API specifications, validating them and running API security tests. - blst-security/cherrybomb
2022 · github.com · its alternatives →
- 15OS
tl;dr we released openapi.security, an online tool that performs a dozen of security tests on any given openapi/swagger-based API, with no signup or email required. You can try it here: https://openapi.security My team at Escape (YC W23) is mainly focused on securing GraphQL APIs. For this, we developed a new approach called Feedback driven API Exploration. Basically, we infer the right security tests cases to run using the specification and a carefully crafted in house graph traversal algorithm. (It's a bit long to describe here but we published a more in depth explanation of…
2023 · openapi.security · its alternatives →
- 16
Hi, my name is Miguel and I am very happy to share what's been months worth of work :) The project has rough edges for sure, but any early feedback, comments or concerns are appreciated! === The Problem === You work on the Security and Operations (SecOps) team in charge of your organization's Software Supply Chain Security. You feel pretty good about the state of things already, your developer teams are signing their commits, deliverables, scanning for vulnerabilities,… Life is good! Then you realize that you are not compliant with the latest security requirements. You get referred to…
2023 · github.com · its alternatives →
- 17
Hurl, run and test HTTP requests with plain text and curl. Hurl can run fast automated integration tests.
2021 · hurl.dev · its alternatives →
- 18
SSOReady▲144Open source developer tools for enterprise single sign-on
2024 · github.com · its alternatives →
- 19
Aspen▲190Blazing fast API tester with AI helper & no login required
2024 · getaspen.io · its alternatives →
- 20CH
Share to connect to share
2019 · brotandgames.com · its alternatives →
- 21
- 22
- 23
- 24
Develop faster, eliminate complexity, protect your secrets
2022 · 1password.com · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →