Cybersecurity

API Security Testing

Security-test a REST, GraphQL, or gRPC API with Strix — autonomous agents that enumerate endpoints from an OpenAPI/GraphQL schema (or by crawling), then actually exploit the API-specific vulnerability classes in the OWASP API Security Top 10 (2023) — broken object-level authorization (BOLA/IDOR), broken object property level authorization (excessive data exposure and mass assignment), broken function-level authorization, unrestricted resource consumption, SSRF, injection, and auth/token flaws. Every finding comes with a working proof-of-concept request. Use when the user asks to pentest, security-test, audit, or find vulnerabilities in an API, endpoint, or backend service.

Publisher / source

usestrix/strix (found on the CSV list)

Upstream record

usestrix/strix

Version

Version 1

Published

2026-11-03

Publication review

Approved for publication · recorded passed scan 2026-11-03

Content fingerprint

bd04c90d87be2353ebefee33363af0818746345e25c80ed36f63fcdd2b25509c