APICheck : The DevSecOps Toolset For REST APIs

APICheck is a complete toolset designed and created for testing REST APIs.

Why APICheck?

APICheck focuses not only in the security testing and hacking use cases. The goal of the project is to become a complete toolset for DevSecOps cycles.

The tools are aimed to diverse users profiles:

  • Developers
  • System Administrators
  • Security Engineers & Penetration Testers

APICheck is an environment for integrating existing HTTP APIs tools and create execution chains easily. Designed with integration third party tools in mind.

APICheck is comprised of a set of tools that can be connected to each other to achieve different functionalities, depending on how they are connected. It allows you to create execution chains

This page contains a list of currently available tools with a brief description of them.

Authors : APICheck is being developed by BBVA Innovation Security Labs team.


APICheck is Open Source Software and available under the Apache 2 license.