BurpAPISecuritySuite

All-in-one Burp Suite extension for API reconnaissance, fuzzing, and vulnerability detection.

Pluginfree

BurpAPISecuritySuite is a Burp Suite extension that combines API reconnaissance, fuzzing, and vulnerability detection into one tool instead of many separate extensions. It automatically captures and normalizes API traffic, runs fuzzing campaigns across 15 attack types covering the OWASP API Top 10, and integrates with tools like Nuclei and Turbo Intruder. It's built for penetration testers already working inside Burp Suite.

Website

Full match profile

Behind the summary, Matchbox keeps a richer profile of BurpAPISecuritySuite - the signals our matcher actually reads to decide when to surface it. It stays private; claim the listing to see and control it.

Problem & pain-point mapping
Who we surface it to (audience fit)
What it's a strong alternative to
Trust & credibility signals

Claim BurpAPISecuritySuite to unlock →

Try Matchbox with your own problem

Describe what is not working - we’ll show you whether BurpAPISecuritySuite (or something else) actually fits.

Try a problem