Openapi.security
Security and privacy
api security scanner
SHOW HN2023
15points
18comments
#1,931of 3,109 in 2023
Top 63%of 2023 by points
How HN took it
CuriousMostly questions and neutral comments
3 positive, 9 neutral or asking, 0 mixed, 1 critical, out of 13 comments about the project. Thread score +0.15.
Execution: 0 for, 1 againstPerformance: 1 for, 0 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Handy and quick to use; found an unauthenticated route
From 1 comment
Really handy this online scan tool! It detected an unauthenticated POST route on my API!
sophieblo on HN
Objections
Failed with a 502 error on a large custom schema
From 1 comment
My schema breaks it somehow, the POST request to openapi.prod.scanner.cloud.escape.tech/fast returns a 502 after ~20s: https://i.vgy.me/D14u3k.png
helb on HN
Cannot scan authenticated endpoints yet
From 1 comment
Seems like a nice tool! Just a quick question, I do run some authenticated endpoints and would like to have them scanned. How can I achieve that with this scanner ?
steffthestunter on HN
Requests
Support for authenticated APIs via headers
From 1 comment
We plan to support authenticated APIs through headers soon. Stay tuned on our Discord https://discord.escape.tech/
iCarossio on HN
Ability to test local APIs
From 2 comments
Looks nice, is there a way to test a local api ?
MintsInc on HNCan I test my dev API ?
Dribble4633 on HN
Questions
How to scan local or dev APIs
From 2 comments
Looks nice, is there a way to test a local api ?
MintsInc on HNCan I test my dev API ?
Dribble4633 on HN
How to enable unauthenticated route detection
From 1 comment
Awesome ! I tried and saw grey checks. How can I manage to activate unauthenticated route detection ?
spQKL on HN
Alternatives named
graphql.security, the same team's GraphQL scanner
From 1 comment
Hey there, Escape dev here! This project follows the steps of graphql.security, our fast and free graphql API scanner, check it out if you use graphql rather than swagger/openapi
gauben on HN