ApyGuard API Security Scanner vs WuppieFuzz
ApyGuard API Security Scanner
apyguard.comWuppieFuzz
github.comSide by side
| Figure | ApyGuard API Security Scanner | WuppieFuzz |
|---|---|---|
| Price from | $129/mo | Free |
| Free plan | — | Yes |
| Free trial | Yes | — |
| Open source | — | Yes |
| Web | Yes | — |
| Windows | — | Yes |
| macOS | — | Yes |
| Linux | — | Yes |
| API | — | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 3 | 2 |
| Spec score · API Security Testing Software | 8.4 (#4) | 8.2 (#8) |
| Purpose | ApyGuard scans authenticated APIs before release for authorization, OWASP API Security Top 10, and business-logic risks. | WuppieFuzz is a coverage-guided REST API fuzzer built on LibAFL to find potential errors and security flaws. |
Plans
ApyGuard API Security Scanner
- Free trialFree
- Basic$129 a month
- EnterprisePriced on request
In their own words
ApyGuard API Security Scanner
ApyGuard API Security Scanner has no write-up on Specifiction yet; its figures are above.
WuppieFuzz
WuppieFuzz is a free, open-source, self-hosted REST API fuzzer built on LibAFL. It generates and mutates requests from an OpenAPI specification to seek potential errors and security flaws. Black-box, grey-box, and white-box testing are supported, along with authentication and input-validation testing. Authentication formats include Bearer, custom, cookie, OAuth, and Web Fuzzing Commons. Code coverage is supported for Java, JavaScript, and Python, while code coverage reports currently support JaCoCo. The tool can produce endpoint coverage reports, and a Grafana dashboard can visualize request information from a fuzzing campaign. It runs on Windows, macOS, and Linux and uses the Apache 2.0 license. TNO says fuzzing data is not shared with TNO or third parties. The tool is described for software development, supply-chain quality control, or penetration testing. WuppieFuzz requires an OpenAPI document in JSON or YAML to generate requests, and API discovery is not supported. Its plan costs nothing.