Pentestas API Scanner

Pentestas API Scanner is ranked #12 of 27 in API security testing software on The Geeks Club. It runs on API, Web. A free trial is offered. Paid plans start at $6.58/mo.

Pentestas API Scanner plans and pricing

All plans

Starter $79/yr Billed annually ($948/year); page also shows $99/month 5 scans per month · 1 verified domain · web vulnerability scanning · OWASP Top 10 · email support pentestas.com · 2 Oct 2026

Professional $249/yr Billed annually ($2,988/year); page also shows $299/month Unlimited scans · 5 verified domains · API penetration testing · authenticated scanning · GitHub, GitLab, Jenkins · Slack and Jira pentestas.com · 2 Oct 2026

Business $499/yr Billed annually ($5,988/year); page also shows $599/month Unlimited scans · 15 verified domains · AI exploitation engine · mobile app pentesting · phone support and SLA guarantees pentestas.com · 2 Oct 2026

Enterprise Not published Custom contract; flexible terms Unlimited verified domains · custom integrations and on-premise · dedicated security team pentestas.com · 2 Oct 2026

Compared on API security testing software

Free plan: Yes
Paid from: $99/mo
API discovery: Yes
Authentication testing: Yes
Authorization testing: Yes
Input-validation testing: Yes
Deployment: hybrid
API formats: REST, SOAP, OpenAPI, Swagger, Postman, GraphQL, gRPC

Best Pentestas API Scanner alternatives

See all 12

8.0 42Crunch API Security Platform Free plan

7.8 APISec Platform Free plan

7.7 AquilaX API Security Scanner Free plan

7.7 Pynt Free plan

7.6 Beagle Security Free plan

7.6 ZeroThreat Free plan

Pentestas API Scanner

Purpose: API Scanner scans live APIs, analyzes Swagger/OpenAPI specifications, and decodes JWTs to inspect claims and signature weaknesses.
Protocols: The scanner covers REST and SOAP requests using GET, POST, PUT, PATCH, and DELETE with authentication variants and common injection payloads.
Automated checks: Its automated checks include authentication, authorization, mass assignment, injection, and JWT-signing checks.
OpenAPI analysis: The OpenAPI/Swagger parser flags endpoints without authentication, overly broad scopes, undocumented response codes, and missing rate limits.
JWT checks: JWT checks include alg=none, weak HS256 secrets, kid injection, missing exp/iss/aud, and signature stripping.
Authorization checks: The tool runs BOLA and BFLA probes for broken object-level and function-level authorization.
Results: Findings are grouped by endpoint or claim with severity and a one-line remediation; reports can be exported as PDF, CSV, or JSON.
Integrations: The page says results can be fed into SIEM, ticketing systems, or CI/CD pipelines through the REST API.
Security and privacy: Pentestas says scan data is encrypted at rest and in transit, and users control data retention and export.
Free usage limit: The free tier allows two runs per tool per IP per day, and the page says it does not keep history.
GraphQL limit: GraphQL is not covered on this page; Pentestas directs users to its separate GraphQL Scanner.
Support: The pricing page lists email support for Starter, priority chat for Professional, and phone support with SLA guarantees for Business.
Price from: $6.58/mo

Visit site Alternatives

Where it ranks on The Geeks Club

Best API Security Testing Software in 2026#12 of 27

Is Pentestas API Scanner yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Pentestas API Scanner

Sources

pentestas.com/api-scanner· checked 2 Oct 2026
pentestas.com/pricing· checked 2 Oct 2026