Skip to content
SPECIFICTION
Get listed

Pentestas API Scanner

pentestas.com

From $79/mo Free trial WebAPI
Visit pentestas.com
Spec score 7.6 #16 of 27 in API Security Testing Software

Spec sheet

Purpose
API Scanner scans live APIs, analyzes Swagger/OpenAPI specifications, and decodes JWTs to inspect claims and signature weaknesses.Read 2 Oct 2026 · pentestas.com
Integrations
The page says results can be fed into SIEM, ticketing systems, or CI/CD pipelines through the REST API.Read 2 Oct 2026 · pentestas.com
Support
The pricing page lists email support for Starter, priority chat for Professional, and phone support with SLA guarantees for Business.Read 2 Oct 2026 · pentestas.com
Authorization checks
The tool runs BOLA and BFLA probes for broken object-level and function-level authorization.Read 2 Oct 2026 · pentestas.com
Automated checks
Its automated checks include authentication, authorization, mass assignment, injection, and JWT-signing checks.Read 2 Oct 2026 · pentestas.com
Free usage limit
The free tier allows two runs per tool per IP per day, and the page says it does not keep history.Read 2 Oct 2026 · pentestas.com
GraphQL limit
GraphQL is not covered on this page; Pentestas directs users to its separate GraphQL Scanner.Read 2 Oct 2026 · pentestas.com
JWT checks
JWT checks include alg=none, weak HS256 secrets, kid injection, missing exp/iss/aud, and signature stripping.Read 2 Oct 2026 · pentestas.com
OpenAPI analysis
The OpenAPI/Swagger parser flags endpoints without authentication, overly broad scopes, undocumented response codes, and missing rate limits.Read 2 Oct 2026 · pentestas.com
Protocols
The scanner covers REST and SOAP requests using GET, POST, PUT, PATCH, and DELETE with authentication variants and common injection payloads.Read 2 Oct 2026 · pentestas.com
Results
Findings are grouped by endpoint or claim with severity and a one-line remediation; reports can be exported as PDF, CSV, or JSON.Read 2 Oct 2026 · pentestas.com
Security and privacy
Pentestas says scan data is encrypted at rest and in transit, and users control data retention and export.Read 2 Oct 2026 · pentestas.com

Plans and prices

Starter $948 a year Billed annually ($948/year); page also shows $99/month 5 scans per month · 1 verified domain · web vulnerability scanning · OWASP Top 10 · email support Read 2 Oct 2026 · pentestas.com
Professional $2,988 a year Billed annually ($2,988/year); page also shows $299/month Unlimited scans · 5 verified domains · API penetration testing · authenticated scanning · GitHub, GitLab, Jenkins · Slack and Jira Read 2 Oct 2026 · pentestas.com
Business $5,988 a year Billed annually ($5,988/year); page also shows $599/month Unlimited scans · 15 verified domains · AI exploitation engine · mobile app pentesting · phone support and SLA guarantees Read 2 Oct 2026 · pentestas.com
Enterprise Priced on request Custom contract; flexible terms Unlimited verified domains · custom integrations and on-premise · dedicated security team Read 2 Oct 2026 · pentestas.com

Every Pentestas API Scanner plan and price →

Where Specifiction places it

Alternatives to Pentestas API ScannerAll alternatives →