API Security Scanner
Paste an OpenAPI or Swagger spec — findings are computed entirely in your browser. Nothing leaves this device.
OpenAPI / Swagger document (JSON or YAML)
Need continuous multi-node compliance audits for your API surface? Register for a tenant key · Try the proof sandbox
Prefer a standalone tool? The same scanner runs as a utility: online-utilities.com/api-scanner
What the checks map to — the rules behind the findings: GDPR Article 32 security of processing · CSP security headers · compliance rules reference