Pentest-Tools.com API Scanner

Pentest-Tools.com API Scanner is ranked #5 of 29 in web application security scanners on The Geeks Club. It runs on API, Linux, macOS, Web. A free trial is offered. Paid plans start at $95/mo.

Pentest-Tools.com API Scanner plans and pricing

All plans

NetSec $95/mo From $95/month with 5 assets; price varies by asset count and billing cycle. Network scanning · cloud scanning · password auditing · reconnaissance · limited web and API scanning pentest-tools.com · 29 Sept 2026

WebNetSec $140/mo From $140/month with 5 assets; price varies by asset count and billing cycle. Everything in NetSec · DAST · authenticated web scans · REST and GraphQL API scanning · CMS scanning pentest-tools.com · 29 Sept 2026

Pentest Suite $190/mo From $190/month with 5 assets; price varies by asset count and billing cycle. Everything in WebNetSec · automated CVE exploitation · SQL injection and XSS exploiters · pentest report generator pentest-tools.com · 29 Sept 2026

Compared on web application security scanners

Free plan: Yes
Paid from: $95/mo
API discovery: No
Authentication testing: Yes
Input-validation testing: Yes
Deployment: cloud
API formats: OpenAPI 2 and 3 in YAML, YML, or JSON; Postman Collection

Best Pentest-Tools.com API Scanner alternatives

See all 12

7.6 Qualys External Attack Surface Management Free trial

7.6 ZeroThreat Free plan

7.5 Beagle Security Free plan

7.3 Nuclei Free plan

7.1 Wapiti Free plan

7.0 Burp Suite DAST Free trial

Pentest-Tools.com API Scanner

Purpose: The online API Vulnerability Scanner assesses APIs and detects vulnerabilities including SQL injection, SSRF, local file inclusion, code injection, and request URL override.
Supported APIs: The scanner works on REST APIs, GraphQL APIs, and Postman Collections.
Specification support: It supports OpenAPI versions 2 and 3 in YAML, YML, and JSON formats.
Authentication: Authenticated scans can use request headers with methods including Basic Authorization and JWT tokens.
Reports: Reports include risk summaries, vulnerability evidence, remediation advice, and a list of 40+ tests; exports vary by plan and include PDF, HTML, CSV, XLSX, or editable DOCX.
Trial terms: The full scanner trial lasts 7 days, requires a business email and card, and costs nothing if canceled before day 8.
Integrations: The platform lists Jira, Slack, Microsoft Teams, Discord, webhooks, Nucleus, Vanta, Burp Suite, AWS, Azure Marketplace, GitHub Actions, and a REST API among its integrations.
Security certification and privacy: PentestTools SA says it is certified to ISO/IEC 27001:2023 and processes customer data under GDPR.
Data protection: The company says customer data is encrypted at rest with AES-256 and in transit with TLS 1.2+, and reports are automatically deleted 30 days after generation.
Hosting and residency: The product runs in Hetzner and Linode data centers in the EU, UK, Iceland, and US; new customers can choose US or Europe data hosting.
Plan limits: Pricing states that API scanning is limited in NetSec and included in WebNetSec, while all plans include API access and unlimited scans on assets.
Founded: 2017
Headquarters: Bucharest, Romania, Europe
Price from: $95/mo

Visit site Alternatives

Where it ranks on The Geeks Club

Best Web Application Security Scanners in 2026#5 of 29
Best API Security Testing Software in 2026#8 of 27

Is Pentest-Tools.com API Scanner yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Pentest-Tools.com API Scanner

Sources

pentest-tools.com/website-vulnerability-scanning/api-scan· checked 29 Sept 2026
pentest-tools.com/features/integrations· checked 29 Sept 2026
pentest-tools.com/legal/trust-and-assurance· checked 29 Sept 2026
pentest-tools.com/pricing· checked 29 Sept 2026