RapiFuzz APIFuzzer review
A broad API fuzzing tool for teams testing multiple API formats.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
RapiFuzz APIFuzzer is an API security testing tool for standalone APIs and APIs embedded in web applications. It is aimed at organizations in sectors such as BFSI, healthcare, manufacturing, government, and defense, with features for API discovery, API-SBOM generation, vulnerability detection, reporting, and remediation guidance. Its format coverage includes REST, GraphQL, SOAP, JSON-RPC, and XML-RPC, making it relevant for teams responsible for varied API estates.
Its main strength is breadth across the API testing lifecycle. Automated fuzzing is paired with OWASP API Security Top 10 testing for 2019 and 2023, authentication and authorization testing, input validation testing, and detection of BOLA, BFLA, injection, and rate-limiting issues. Teams can add custom test cases and upload payloads, while API lifecycle management supports ongoing tracking. The published offering also includes a 15-day free trial, but pricing requires contacting sales rather than choosing a published plan.
RapiFuzz APIFuzzer fits DevSecOps workflows through CI/CD integration and is positioned for CI/CD readiness. Deployment is self-hosted, with on-premise deployment specified, so it suits organizations that want API security testing within their own deployment environment. Buyers seeking broad format support, custom fuzzing, and coverage of named API risks should consider it; organizations requiring a cloud deployment model or transparent plan pricing should evaluate alternatives alongside it.
RapiFuzz APIFuzzer pros and cons
- Where it wins
- Supports REST, GraphQL, SOAP, JSON-RPC, and XML-RPC APIs
- Combines API discovery, API-SBOM generation, and automated fuzzing
- Tests OWASP API Top 10 risks with custom payload support
- Where it doesn't
- Pricing requires contacting sales
- Deployment is self-hosted and on-premise
- Cloud deployment is not part of the specified deployment model
RapiFuzz APIFuzzer fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update