Show HN: Quickly Create Security Tests for All Your APIs (YC S21) https://ift.tt/e5TLu1F

Show HN: Quickly Create Security Tests for All Your APIs (YC S21) Hey everyone, excited to share something we’ve been working on the last few months! For context, Metlo is an open source API Security tool[0] we launched here on HN a couple months ago[1]. After working with a few customers over the last couple months, we realized there was a gap in other API testing solutions; especially when it comes to writing security tests. So we decided to completely gut and revamp our testing product - sharing that with you all today! Most Automated API Scanners only find generic vulnerabilities like misconfigured HSTS/CORS Headers and miss vulns specific to your API’s business logic. Making custom tests in tools like Postman (which we love) requires you to manually write tests for every single endpoint. This is quite tedious and time consuming if you have hundreds or thousands of endpoints. So we decided to make the API Security testing experience much faster and more seamless: * With Metlo testing, you can write API tests in a YAML format (https://ift.tt/KCD7Zlm). * To make writing tests fast, Metlo supports autogenerating these tests with javascript templates (https://ift.tt/zLSdHIK). Templates for common vulnerabilities in the OWASP Top 10 like BOLA, Broken Authentication, Security Misconfigurations and more come built-in to Metlo. You can also make custom templates that are specific to your API. * Once you have the right templates you can build rules to apply these templates to many endpoints at once (https://ift.tt/B5jVHMa). This makes it possible to write hundreds of tests against your API in just a few clicks :) We have more info on our docs here: https://ift.tt/KCD7Zlm. And here's a demo video if you’d like a quick walk-through :) https://ift.tt/nRDWi5l We’d love to hear your thoughts! [0] https://ift.tt/57AzhFb [1] https://ift.tt/qpMjFB2 January 31, 2023 at 01:40AM

Komentar

Posting Komentar

Postingan populer dari blog ini

Show HN: Interactive exercises for GNU grep, sed and awk https://ift.tt/OxeFwah

Show HN: Interactive exercises for GNU grep, sed and awk Hello! For the past few months, I've been using a Python framework called Textual to create TUI apps for interactive exercises. Released the app for GNU awk earlier today, so thought I'd create a post here. If you already know how to manage Python packages, you can use the following command to get all the three apps: pip install grepexercises sedexercises awkexercises `pipx` should also work, but I haven't tested it. The GitHub repo has the source code as well as more detailed installation instructions. You can use alternative CLI tools to solve these exercises as well. For example, Perl instead of GNU awk or ripgrep instead of GNU grep and so on. Hope you find these TUI apps useful. I'd highly appreciate your feedback. Happy learning :) https://ift.tt/Hp9kFEi August 17, 2023 at 05:13PM
Baca selengkapnya

Show HN: Create demos & guides just with a simple prompt https://ift.tt/HfWo3mz

Show HN: Create demos & guides just with a simple prompt Teams often create demos & guides on a daily basis. But creating them is time consuming and needs a lot of effort. From content to the branding, customizations, and many more - they are not something you would want to do on a daily basis. Enter Fable. Purpose built for teams in marketing, sales & customer success. Fable is apt for engaging visitors, closing deals faster, and onboarding your users quickly. https://ift.tt/IVCbkiG October 17, 2024 at 08:32PM
Baca selengkapnya