VulnAPI

Open-source CLI scanner that detects common API security vulnerabilities and misconfigurations.

Desktopfree

VulnAPI is an open-source command-line security scanner for APIs. It checks for common vulnerabilities and misconfigurations — such as missing security headers, CORS issues, and authentication weaknesses — using either curl-like CLI options or an OpenAPI contract, and reports findings by risk level against the OWASP API Top 10. It's built for security engineers and developers auditing their own APIs.

Website

Full match profile

Behind the summary, Matchbox keeps a richer profile of VulnAPI - the signals our matcher actually reads to decide when to surface it. It stays private; claim the listing to see and control it.

Problem & pain-point mapping
Who we surface it to (audience fit)
What it's a strong alternative to
Trust & credibility signals

Claim VulnAPI to unlock →

Try Matchbox with your own problem

Describe what is not working - we’ll show you whether VulnAPI (or something else) actually fits.

Try a problem