AquilaX API Security Scanner

aquilax.ai

From $19/mo Free plan WebAPISelf-hostedBrowser extension

Spec score 8.6 #3 of 27 in API Security Testing Software

What it is

AquilaX API Security Scanner analyzes API specifications and probes running endpoints for security weaknesses. Its checks target the OWASP API Security Top 10, including broken authentication, object-level authorization problems, mass assignment, excessive data exposure, and rate-limiting gaps. Supported inputs include OpenAPI 3.x, Swagger 2.0, GraphQL schemas, gRPC/Protobuf, Postman collections, discovered URLs, REST APIs, and webhook endpoints. The API scanner is available on Premium and Ultimate; all plans include unlimited scans without scan quotas or per-scan fees. AquilaX lists more than 50 integrations, including GitHub, GitLab, Jira, Slack, Azure DevOps, Bitbucket, and REST API access. CI/CD and IDE connections include GitHub Actions, GitLab CI, Jenkins, Azure Pipelines, CircleCI, Bitbucket Pipelines, TeamCity, VS Code, and JetBrains IDEs. On-premises deployment supports Docker and Docker Compose, air-gapped environments, Ubuntu 22.04 LTS or RHEL 9, and data sovereignty. AquilaX says source code is processed in isolated temporary environments, with only security findings retained and scan containers destroyed after analysis. It states that data in transit uses TLS 1.3 and stored findings and metadata use AES-256 encryption. Premium costs $19 a month per developer; Ultimate costs $99 a month per developer.

Spec sheet

Deployment: On-premises deployment supports Docker and Docker Compose, air-gapped environments, Ubuntu 22.04 LTS or RHEL 9, and full data sovereignty.Read 1 Oct 2026 · aquilax.ai
Integrations: AquilaX lists more than 50 integrations, including GitHub, GitLab, Jira, Slack, Azure DevOps, Bitbucket, and REST API access.Read 1 Oct 2026 · aquilax.ai
Support: Ultimate includes priority support, while on-premises deployments include full onboarding support and offer enterprise SLA options.Read 1 Oct 2026 · aquilax.ai
Headquarters: United KingdomRead 28 Sep 2026 · aquilax.ai
Founded: 2022Read 28 Sep 2026 · aquilax.ai
API formats: Supported inputs include OpenAPI 3.x, Swagger 2.0, GraphQL schemas, gRPC/Protobuf, Postman collections, discovered URLs, REST APIs, and webhook endpoints.Read 1 Oct 2026 · aquilax.ai
API scanner availability: The API Security scanner is available on Premium and Ultimate plans.Read 1 Oct 2026 · aquilax.ai
API testing: AquilaX combines OpenAPI/Swagger specification analysis with active runtime probing to detect BOLA, broken authentication, mass assignment, excessive data exposure, and rate-limiting gaps.Read 1 Oct 2026 · aquilax.ai
CI/CD and IDE: The platform integrates with GitHub Actions, GitLab CI, Jenkins, Azure Pipelines, CircleCI, Bitbucket Pipelines, TeamCity, VS Code, and JetBrains IDEs.Read 1 Oct 2026 · aquilax.ai
Company positioning: AquilaX describes itself as an AI-powered application-security platform for modern DevSecOps teams.Read 1 Oct 2026 · aquilax.ai
Data handling: AquilaX says source code is analyzed in ephemeral isolated environments, only security findings are retained, and scan containers are destroyed after analysis.Read 1 Oct 2026 · aquilax.ai
Encryption: AquilaX states that data in transit uses TLS 1.3 and stored findings and metadata use AES-256 encryption.Read 1 Oct 2026 · aquilax.ai
OWASP coverage: The API scanner tests every endpoint against the full OWASP API Security Top 10 using static specification analysis and dynamic runtime testing.Read 1 Oct 2026 · aquilax.ai
Scan limits: All plans include unlimited scans with no per-scan fees or scan quotas.Read 1 Oct 2026 · aquilax.ai
Security certifications: The Trust Center lists ISO 27001, SOC 2, PCI-DSS, and GDPR among AquilaX’s certifications or compliance commitments.Read 1 Oct 2026 · aquilax.ai

Plans and prices

Free Free Forever · no credit card Secrets scanning · PII detection · compliance auditing · unlimited scans · CI/CD + IDE integration Read 1 Oct 2026 · aquilax.ai

Premium $19 a month per developer / month · billed to your org Everything in Free · SAST · SCA · DAST · container security · IaC scanner · API security scanner · 7 scan engines total Read 1 Oct 2026 · aquilax.ai

Ultimate $99 a month per developer / month · billed to your org · 14-day free trial Everything in Premium · malware detection · Vibe Code · Securitron AI · AI remediation · on-premises deployment Read 1 Oct 2026 · aquilax.ai

Enterprise & Custom Deployments Priced on request Pricing may vary Custom seat counts · SSO/SAML · dedicated Securitron AI model · single-tenant on-premises · enterprise SLA · volume discounts Read 1 Oct 2026 · aquilax.ai

Every AquilaX API Security Scanner plan and price →

Strong points and limits

Strong points

Tests endpoints against the OWASP API Security Top 10.
Accepts OpenAPI, GraphQL, gRPC/Protobuf, and Postman inputs.
All plans include unlimited scans.
Lists more than 50 integrations.
On-premises deployment supports air-gapped environments.

Limits

API Security scanner requires Premium or Ultimate.
Premium costs $19 a month per developer.
Ultimate costs $99 a month per developer.

Who it suits

AquilaX suits developers and security teams assessing APIs as part of application security work. Its API scanner is for Premium and Ultimate users, with self-hosted and air-gapped deployment options listed.

Verdict

AquilaX pairs specification analysis with runtime probing and supports a wide range of API formats. The free plan includes unlimited scans, but access to the API Security scanner starts with Premium.