Proactive, Open source API security β API discovery, API Security Posture, Testing in CI/CD, Test Library with 1000+ Tests, Add custom tests, Sensitive data exposure
β1,497Jul 28, 2026Updated this week
Alternatives and similar repositories for akto
Users that are interested in akto are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- π Join us for 30days of daily API security tests. #30days30tests We've spent last 120days building amazing API security tests for the cβ¦β221May 22, 2023Updated 3 years ago
- Metlo is an open-source API security platform.β1,782Jul 25, 2025Updated last year
- A curated list of security card games.β173Jun 2, 2025Updated last year
- Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.β1,361Updated this week
- A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the communitβ¦β3,859May 1, 2026Updated 2 months ago
- Managed Kubernetes at scale on DigitalOcean β’ AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Extract URLs, paths, secrets, and other interesting bits from JavaScriptβ1,874May 22, 2024Updated 2 years ago
- reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and findinβ¦β7,908Jun 29, 2026Updated last month
- A Burp Suite extension to add OpenAI (GPT) on Burp and help you with your Bug Bounty recon to discover endpoints, params, URLs, subdomainβ¦β904May 3, 2023Updated 3 years ago
- Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable β¦β757Jul 10, 2026Updated 2 weeks ago
- reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Eβ¦β8,755Jul 13, 2026Updated 2 weeks ago
- Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one plβ¦β1,046Jun 6, 2026Updated last month
- A python tool used to discover endpoints, potential parameters, a target specific wordlist for a given target and secretsβ1,577Mar 8, 2026Updated 4 months ago
- A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.β865Jul 22, 2026Updated last week
- All about bug bounty (bypasses, payloads, and etc)β6,813Sep 8, 2023Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient β’ AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Automating situational awareness for cloud penetration tests.β2,544May 26, 2026Updated 2 months ago
- Vulnerable REST API with OWASP top 10 vulnerabilities for security testingβ1,279Apr 7, 2026Updated 3 months ago
- i will upload more templates here to share with the comunity.β572Apr 17, 2024Updated 2 years ago
- Find authentication (authn) and authorization (authz) security bugs in web application routes.β280Sep 11, 2025Updated 10 months ago
- Burp Extension to find potential endpoints, parameters, and generate a custom target wordlistβ1,523Jan 8, 2026Updated 6 months ago
- REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applicationsβ1,368Aug 7, 2025Updated 11 months ago
- BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for cβ¦β446Dec 30, 2025Updated 6 months ago
- A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities. Use c{api}tal to learn, train and exploit API Secβ¦β334Jun 10, 2026Updated last month
- Community curated list of nuclei templates for finding "unknown" security vulnerabilities.β107May 2, 2024Updated 2 years ago
- AI Agents on DigitalOcean Gradient AI Platform β’ AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Real-world infosec wordlists, updated regularlyβ1,777Updated this week
- APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intβ¦β973Jan 17, 2025Updated last year
- A lightweight tool for orchestrating and organizing your bug hunting recon / pentesting command-line workflowsβ308Sep 8, 2023Updated 2 years ago
- An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flawsβ4,044Oct 4, 2025Updated 9 months ago
- Hidden parameters discovery suiteβ2,086Sep 8, 2024Updated last year
- A Modern Orchestration Engine for Securityβ6,494Jul 21, 2026Updated last week
- This is a Burp Suite extension that allows users to easily add web addresses to the Burp Suite scope.β97Jan 2, 2025Updated last year
- ππ¦ Dalfox is a powerful open-source XSS scanner and utility focused on automation.β5,181Updated this week
- Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.β6,298Aug 14, 2024Updated last year
- Deploy on Railway without the complexity - Free Credits Offer β’ AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Automated Security Testing For REST API'sβ2,658Jun 5, 2024Updated 2 years ago
- openrisk is a tool that generates a risk score based on the results of a Nuclei scan.β180Dec 22, 2025Updated 7 months ago
- A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan for discovering highly bespoke vulnerabilities β¦β2,338Jun 9, 2024Updated 2 years ago
- 75k+ WordPress Nuclei templates, updated daily from Wordfence intelβfilter by severity/tags/CVE and scan in one line. ππβ1,270Updated this week
- Secrets Patterns DB: The largest open-source Database for detecting secrets, API keys, passwords, tokens, and more.β1,600Aug 6, 2025Updated 11 months ago
- Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan, VirusTotal, GhostArchive & Intelligence X!β2,697Jun 11, 2026Updated last month
- Rockyou for web fuzzingβ3,207Mar 11, 2026Updated 4 months ago