Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
You can either submit API test requests through the user interface form or trigger the EthicalCheck API using tools like cURL or Postman. To input your request, you will need a public-facing OpenAPI Specification URL, an authentication token that remains valid for a minimum of 10 minutes, an active license key, and your email address. The EthicalCheck engine autonomously generates and executes tailored security tests for your APIs based on the OWASP API Top 10 list, effectively filtering out false positives from the outcomes while producing a customized report that is easily digestible for developers, which is then sent directly to your email. As noted by Gartner, APIs represent the most common target for attacks, with hackers and automated bots exploiting vulnerabilities that have led to significant security breaches in numerous organizations. This system ensures that you only see genuine vulnerabilities, as false positives are systematically excluded from the results. Furthermore, you can produce high-quality penetration testing reports suitable for enterprise use, allowing you to share them confidently with developers, customers, partners, and compliance teams alike. Utilizing EthicalCheck can be likened to conducting a private bug-bounty program that enhances your security posture effectively. By opting for EthicalCheck, you are taking a proactive step in safeguarding your API infrastructure.
Description
open-appsec is an open-source initiative that builds on machine learning to provide pre-emptive web app & API threat protection against OWASP-Top-10 and zero-day attacks.
It can be deployed as add-on to Kubernetes Ingress, NGINX, Envoy and API Gateways.
The open-appsec engine learns how users normally interact with your web application. It then uses this information to automatically detect requests that fall outside of normal operations, and sends those requests for further analysis to decide whether the request is malicious or not.
open-appsec uses two machine learning models:
1. A supervised model that was trained offline based on millions of requests, both malicious and benign.
2. An unsupervised model that is being built in real time in the protected environment. This model uses traffic patterns specific to the environment.
open-oppsec simplifies maintenance as there is no threat signature upkeep and exception handling, like common in many WAF solutions.
API Access
Has API
API Access
Has API
Integrations
F5 NGINX Ingress Controller
Kubernetes
NGINX
OAuth
OWASP Threat Dragon
Integrations
F5 NGINX Ingress Controller
Kubernetes
NGINX
OAuth
OWASP Threat Dragon
Pricing Details
$99 one-time payment
Free Trial
Free Version
Pricing Details
No price information available.
Free Trial
Free Version
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Vendor Details
Company Name
EthicalCheck
Country
United States
Website
www.ethicalcheck.dev/
Vendor Details
Company Name
open-appsec
Founded
2022
Country
Israel
Website
www.openappsec.io
Product Features
API Testing
Functional Testing
Fuzz Testing
Load Testing
Penetration Testing
Runtime and Error Detection
Security Testing
UI Testing
Validation Testing
Product Features
Application Security
Analytics / Reporting
Open Source Component Monitoring
Source Code Analysis
Third-Party Tools Integration
Training Resources
Vulnerability Detection
Vulnerability Remediation
Web Application Firewalls (WAF)
Access Control / Permissions
Alerts / Notifications
Automate and Orchestrate Security
Automated Attack Detection
DDoS Protection
Dashboard
IP Reputation Checking
Managed Rules
OWASP Protection
Reporting / Analytics
Secure App Delivery
Server Cloaking
Virtual Patching
Zero-Day Attack Prevention