middleBrick

API Security Risk Scoring Platform

middleBrick scans any API endpoint and returns a security risk score (A+ through F) with actionable findings — no agents, no config, no credentials required.

How it works

Submit a URL or OpenAPI spec. middleBrick runs 12+ security checks in parallel and delivers a prioritized report with severity ratings and remediation guidance in under 60 seconds. It tests what an unauthenticated attacker would see — black-box, zero setup.

AI & LLM API Security

The only self-service scanner with dedicated LLM checks: * System prompt leakage detection * Prompt injection testing * Jailbreak probes * Data exfiltration vectors * Excessive agency and cost exploitation

What it covers

OWASP API Security Top 10: * Access Control: BOLA/IDOR and BFLA. * Authentication: Multi-method bypass detection and JWT analysis. * Data Exposure: PII, API keys, and credit cards with Luhn validation. * Technical Vulnerabilities: Input Validation, Rate Limiting, SSRF, and Security Misconfiguration. * Modern Architecture: GraphQL vulnerabilities, Encryption & Transport Security, and API Inventory gaps. * Specifications: Full OpenAPI 2.0/3.0/3.1 spec analysis included.

Built for your workflow

• Dashboard: Scan, track scores, and export PDF compliance reports (SOC 2, PCI-DSS, HIPAA, ISO 27001).
• CLI: npx middlebrick scan in your terminal or CI pipeline.
• GitHub Action: Fail builds when security score drops below threshold.
• MCP Server: Scan from Claude, Cursor, or any MCP-compatible AI tool.

Boxcryptor is a flexible and scalable encryption software for the cloud, that supports more than 30 providers (including OneDrive, SharePoint and an integration in Microsoft Teams) as well as NAS encryption on all platforms. It offers collaboration, audit, and management features that allow secure collaboration on files while being compliant with privacy regulations. Thanks to zero knowledge encryption, all company data is securely protected from third-party access.