42crunch-api-security-testing

Automate API security directly in Claude Code with 42Crunch - automatically audit OpenAPI specs, detect vulnerabilities aligned with OWASP API Security risks (including BOLA/BFLA), and apply AI-powered fixes. Designed for AI-assisted development workflows, it provides continuous guardrails through an audit->scan->remediate->validate loop, ensuring APIs meet enterprise security standards before deployment.

Install

KitScout test notes

Not tested by KitScout yet. When our harness runs it, pros, cons and the tasks we tried appear here, with the date and evidence.

Similar tools

• io.github.aks129/healthclaw-guardrails 34 ★
  Guardrailed FHIR access for AI agents: PHI redaction, audit trail, step-up auth, tenant isolation
• Prism Scanner 28 ★
  Security scanner for AI Agent skills, plugins, and MCP servers with A-F grading.
• AI Guard 19 ★
  Guardrails for AI-written JS/TS: scans, weakened-test checks, package checks, verify before done.
• ToolTrust Scanner 19 ★
  Scans MCP servers for prompt injection, data exfiltration, and privilege escalation.
• aikido 15 ★
  Aikido Security scanning for Claude Code — SAST, secrets, and IaC vulnerability detection powered by the Aikid