Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

Pentest-Tools.com API Scanner

Freemium#20 of 27 in API Security Testing SoftwareOffensive Security

Pentest-Tools.com API Scanner: A cloud API scanner with strong evidence, useful formats, and a clear paid path. Ranked #20 of 27 in API Security Testing Software by our editors (7.2/10); pricing: Free plan · 7-day trial; best for evidence-rich API vulnerability scans.

7.2/10Editor score
Pentest-Tools.com API Scanner7.2 Visit Pentest-Tools

At a glance

  • Editor score
    7.2 / 10
  • Pricing
    Free plan · 7-day trial
  • Best for
    Evidence-rich API vulnerability scans
  • Free plan
    Yes
  • Paid from
    $95/mo
  • Founded
    2017 · Bucharest, Romania, Europe
  • Facts checked
    20 Sep 2026
Pentest-Tools.com API Scanner screenshot
  • Where it wins

    • Light and deep scans with OpenAPI and Postman support
    • Authenticated testing with Basic and Bearer/JWT tokens
    • Replayable evidence and exports in multiple report formats
  • Where it doesn't

    • API discovery is not included
    • Paid pricing varies by scanned-asset count
    • Full-scanner trial requires a business email and card

Our verdict on Pentest-Tools.com API Scanner

Pentest-Tools.com API Scanner is a cloud-based API security testing tool for penetration testers, security consultants, defensive security teams, and system administrators. It accepts API targets, OpenAPI 2 and 3 specifications in YAML, YML, or JSON, and Postman Collections. Users can run light or deep scans, test authenticated APIs, and examine findings for issues such as SQL injection, SSRF, code injection, XXE, broken authentication, and request URL override.

Pricing supports a free starting point and several paid tiers. The Free Edition provides basic API vulnerability scanning with no time limit and no credit card required. NetSec starts at $95 per month for 5 assets and adds limited web and API scanning, network vulnerability scanning, cloud scanning, and password auditing. WebNetSec starts at $140 per month for 5 assets and adds API scanning for REST and GraphQL, authenticated web scans, DAST scanning, and everything in NetSec. Pentest Suite starts at $190 per month for 5 assets and adds an automatic CVE exploiter, SQL injection and XSS exploiters, and a pentest report generator. The API Scanner page also advertises a 7-day full-scanner trial requiring a business email and card.

Its strongest fit is evidence-focused assessment work. Findings include affected URLs, methods, and parameters, with replay support for reviewing requests. Reports can be exported as PDF, HTML, CSV, XLSX, or DOCX depending on the plan, while REST API access supports scan and reporting automation. Integrations include AWS, Vanta, Nucleus Security, Jira, Microsoft Teams, Slack, Discord, and webhooks. Choose it when documented vulnerability evidence, authenticated testing, and flexible input formats matter. Consider an alternative when API discovery is a core requirement.

Your product? Our editors can test Pentest-Tools.com API Scanner in depth and publish a review, labelled as paid · from $149/mo →

Pentest-Tools.com API Scanner pricing

Plans Free plan · 7-day trialFreemium A usable free plan; paid tiers unlock the limits above. Prices checked 20 Sep 2026.
See plans on pentest-tools.com

All 4 Pentest-Tools.com API Scanner plans and prices →

Pentest-Tools.com API Scanner fact sheet

Free planYes
Paid from$95/mo
API discoveryNo
Authentication testingYes
Authorization testingNot verified
Input-validation testingYes
Business-logic testingNot verified
DeploymentCloud
API formatsOpenAPI 2 and 3 in YAML, YML, or JSON; Postman Collection
Free trial7 days · card required
Money-back guarantee10 days
DeploymentCloud
PlatformsWeb
Compliance & securityGDPR, ISO 27001, 2FA
SupportEmail, Live chat, Docs
Built forSmall business, Mid-market, Enterprise (editorial estimate)
Integrations8 integrations: AWS, Vanta, Nucleus Security, Jira, Microsoft Teams, Slack …
PricingFree plan · 7-day trial (source)
Websitepentest-tools.com
Facts checked20 Sep 2026

Pentest-Tools.com API Scanner integrations

Pentest-Tools.com API Scanner lists 8 integrations on its own site.

  • AWS
  • Vanta
  • Nucleus Security
  • Jira
  • Microsoft Teams
  • Slack
  • Discord
  • Webhooks

Alternatives to Pentest-Tools.com API Scanner

See all Pentest-Tools.com API Scanner alternatives →

Also Ranked In

Pentest-Tools.com API Scanner is ranked in 2 of our directories.

Used Pentest-Tools.com API Scanner? Be the first to review it

The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Pentest-Tools.com API Scanner for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.

Write a reviewTwo minutes · verified accounts only · read by an editor before it appears

Reviews come only from verified accounts. Sign in or create an account first — your e-mail is never shown.

Your rating

0 characters · at least 80, up to 3,000

Posted from your verified account. Reviews appear after an editor reads them, usually within two working days.

Featured on iTechGuides

Featured on iTechGuides — Pentest-Tools.com API Scanner 7.2/10

Pentest-Tools.com API Scanner is listed in our API Security Testing Software directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/pentest-tools-com-api-scanner/"><img src="https://www.itechguides.com/best/badge/pentest-tools-com-api-scanner.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update