API discovery, OWASP API Security Top 10, shadow/zombie API detection, and authentication testing.

OWASP API Security Top 10

API1 - Broken Object Level Authorization

API2 - Broken Authentication

API3 - Broken Object Property Level Authorization

API4 - Unrestricted Resource Consumption

API5 - Broken Function Level Authorization

API6 - Unrestricted Access to Sensitive Business Flows

API7 - Server Side Request Forgery

API8 - Security Misconfiguration

API9 - Improper Inventory Management

API10 - Unsafe Consumption of APIs

Discovery Features

Auto-discovery from source code

Shadow API detection

Zombie API detection

API change tracking

Documentation gap analysis

Authentication testing (OAuth, JWT, mTLS)