middleBrick

API Security Risk Scoring Platform

middleBrick scans any API endpoint and returns a security risk score (A+ through F) with actionable findings — no agents, no config, no credentials required.

How it works

Submit a URL or OpenAPI spec. middleBrick runs 12+ security checks in parallel and delivers a prioritized report with severity ratings and remediation guidance in under 60 seconds. It tests what an unauthenticated attacker would see — black-box, zero setup.

AI & LLM API Security

The only self-service scanner with dedicated LLM checks: * System prompt leakage detection * Prompt injection testing * Jailbreak probes * Data exfiltration vectors * Excessive agency and cost exploitation

What it covers

OWASP API Security Top 10: * Access Control: BOLA/IDOR and BFLA. * Authentication: Multi-method bypass detection and JWT analysis. * Data Exposure: PII, API keys, and credit cards with Luhn validation. * Technical Vulnerabilities: Input Validation, Rate Limiting, SSRF, and Security Misconfiguration. * Modern Architecture: GraphQL vulnerabilities, Encryption & Transport Security, and API Inventory gaps. * Specifications: Full OpenAPI 2.0/3.0/3.1 spec analysis included.

Built for your workflow

• Dashboard: Scan, track scores, and export PDF compliance reports (SOC 2, PCI-DSS, HIPAA, ISO 27001).
• CLI: npx middlebrick scan in your terminal or CI pipeline.
• GitHub Action: Fail builds when security score drops below threshold.
• MCP Server: Scan from Claude, Cursor, or any MCP-compatible AI tool.

CodeHerald provides a new way to keep track of your code review queue, grouped by your next action needed.

When would you use CodeHerald?

• You work in a team that does code reviews.
• Your team receives ad-hoc code review requests via multiple channels: DMs, emails, bookmarks of filtered lists.
• Your team sometimes loses track of small pull requests, delaying them days.
• Your team find ad-hoc code review requests distracting, but cannot put a finger on why.
• Your team tried different strategies to improve code review process, and none of them felt right.

If any of the above is true, CodeHerald will help you.

What can CodeHerald do for you?

CodeHerald groups pull requests by next action: must review, needs an update, can be merged. It allows you to replace slack, emails, filters, and browser bookmarks with one single page that you can open at a glance and decide which PR to tackle next.