OFFAT

Automatically tests APIs for common security vulnerabilities from an OpenAPI spec

Desktopfreeglobal

OFFAT (OFFensive Api Tester) is a free, open-source, OWASP-affiliated tool that automatically generates and runs security tests against an API based on its OpenAPI specification, checking for common vulnerabilities. It's aimed at security engineers and DevSecOps teams who want automated API vulnerability testing in CI/CD without writing tests by hand.

Website

Full match profile

Behind the summary, Matchbox keeps a richer profile of OFFAT - the signals our matcher actually reads to decide when to surface it. It stays private; claim the listing to see and control it.

Problem & pain-point mapping
Who we surface it to (audience fit)
What it's a strong alternative to
Trust & credibility signals

Claim OFFAT to unlock →

Something wrong with this listing — dead link, not a real product, wrong info?

Try Matchbox with your own problem

Describe what is not working - we’ll show you whether OFFAT (or something else) actually fits.

Try a problem