Technical reference See exactly what we test on your APIs

Every check the API scanner runs, one by one.

Search and filter the full list. Each check shows what it finds, the detection technique, where it runs, and the CWE, CVE and compliance controls it maps to.

Loading checks…

Get started

Run these checks against your own APIs.

Import a Postman collection or let discovery find your endpoints, then scan public APIs from the cloud or internal ones with a private scanner inside your network.