Openapi.security, a fast security checker for REST-based API
tl;dr we released openapi.security, an online tool that performs a dozen of security tests on any given openapi/swagger-based API, with no signup or email required. You can try it here: https://openapi.security My team at Escape (YC W23) is mainly focused on securing GraphQL APIs. For this, we developed a new approach called Feedback driven API Exploration. Basically, we infer the right security tests cases to run using the specification and a carefully crafted in house graph traversal algorithm. (It's a bit long to describe here but we published a more in depth explanation of…
Openapi.security, a fast security checker for REST-based API launched on February 14, 2023 with 15 votes, #1,331 of 3,829 launches that month and more than 75% of that year's launches.
In plain words
Openapi.security is an online tool that runs a dozen security tests on REST APIs defined with OpenAPI or Swagger specifications. It requires no signup or email and works directly from an API specification. The tool uses feedback-driven API exploration with graph traversal algorithms to identify and execute relevant security test cases automatically. It is designed for developers and security teams who need to quickly assess the security posture of REST-based APIs.
written from the facts on this page · September 2026
From the sources
In the maker’s words, at launch
tl;dr we released openapi.security, an online tool that performs a dozen of security tests on any given openapi/swagger-based API, with no signup or email required. You can try it here: https://openapi.security My team at Escape (YC W23) is mainly focused on securing GraphQL APIs. For this, we…
Does a similar job
all alternatives →
OpenAPI DevTools – Chrome extension that generates an API spec2023 · github.com · ▲811Effortlessly discover API behaviour with a Chrome extension that automatically generates OpenAPI specifications in real time for any app or website.
Cursor for your API2025 · app.getelva.ai · ▲473Generate, edit, lint & test your API workflow in one place
Apidog Fast Request2025 · fastrequest.apidog.com · ▲512Develop APIs fast + automatically detect endpoints
Swagger Inspector2018 · swagger.io · ▲141Free online tool to test APIs and autogenerate documentation
REST Alternative to GraphQL and tRPC2023 · openapistack.co · ▲123
More dev tools this month
the category →
open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.
Dev tools · 28d ago · github.com
Contribute to reladraw/reladraw development by creating an account on GitHub.
Dev tools · 26d ago · github.com
OpenBot▲362Grok Bot alternative: free, local, open-source, multiplayer
Dev tools · 23d ago · openbot.run
Talanoa▲346Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…
Dev tools · 20d ago · talanoa.email
CoreSpeed▲332One MCP for everything your agents need: apps, memory, tools
Dev tools · 28d ago · corespeed.io
Source: Show HN post ↗ · launch text quoted in part
