middleBrick
Wallarm
Metlo API Security
PromptGuard
SecureStack
RepDB
middleBrick scans any API endpoint and returns a security risk score (A+ through F) with actionable findings โ no agents, no config, no credentials required.
Submit a URL or OpenAPI spec. middleBrick runs 12+ security checks in parallel and delivers a prioritized report with severity ratings and remediation guidance in under 60 seconds. It tests what an unauthenticated attacker would see โ black-box, zero setup.
The only self-service scanner with dedicated LLM checks: * System prompt leakage detection * Prompt injection testing * Jailbreak probes * Data exfiltration vectors * Excessive agency and cost exploitation
OWASP API Security Top 10: * Access Control: BOLA/IDOR and BFLA. * Authentication: Multi-method bypass detection and JWT analysis. * Data Exposure: PII, API keys, and credit cards with Luhn validation. * Technical Vulnerabilities: Input Validation, Rate Limiting, SSRF, and Security Misconfiguration. * Modern Architecture: GraphQL vulnerabilities, Encryption & Transport Security, and API Inventory gaps. * Specifications: Full OpenAPI 2.0/3.0/3.1 spec analysis included.
npx middlebrick scan in your terminal or CI pipeline.
RepDB is a one-time-purchase exercise dataset for developers building fitness and workout apps โ not a subscription, not a rate-limited API. You download the data once and own it: JSON (and SQLite on the higher tier), WebP images, and full EN/DE/ES translations, with no per-request billing and no dependency on our servers staying up.
A free tier includes 250 exercises with flat-style 512ร512 images, attribution-licensed for commercial in-app use. The Starter tier ($199) adds the full catalog in classic white-background style. Standard ($399) adds transparent 1024px images, looping animations, exercise relations (similar/progressions/regressions), workout templates, and embeddings โ exclusive to that tier.
Every exercise includes muscle-group highlighting, equipment/muscle icons, MET values, and safety/goal tags. Compared to GIF- or JPG-based competitor APIs, RepDB images are transparent WebP with no watermarks, so they drop into any app UI without a white box around them.
middleBrick RepDBmiddleBrick's answer
middleBrick assigns a quantitative risk score (0-100) to any API in seconds, not weeks. It covers OWASP API Top 10, GraphQL, and LLM/AI-specific security checks in a single scan. It integrates directly into developer workflows via CLI, GitHub Action, and MCP server for AI assistants โ no sales calls, no setup meetings.
RepDB's answer:
RepDB is sold as a one-time download, not a metered API โ you own the JSON/SQLite data and WebP images outright, with no rate limits, no per-request billing, and no risk of the vendor cutting off access. It's also the only dataset in this space with EN/DE/ES translations, transparent (alpha-channel) images with no watermark, muscle-group highlighting, safety/goal tags, and looping animations on the higher tier.
middleBrick's answer
Most API security tools require enterprise contracts, complex onboarding, or inline proxies. middleBrick is fully self-service: scan any API endpoint in minutes even with a free account.
RepDB's answer:
Most alternatives are subscription APIs โ you pay monthly, you're capped on requests, and ExerciseDB's terms of use explicitly forbid caching or storing the data at all, so every image render is a live paid API call. RepDB is the opposite: pay once, download the files, self-host with zero ongoing dependency. It's also the only option offering true DE/ES localization and transparent images instead of a white box behind every exercise.
middleBrick's answer
DevSecOps engineers, API developers, and security teams at startups and scale-ups who need to test their APIs for vulnerabilities without long procurement cycles. Also teams building AI/LLM-powered products who need to secure their model-facing APIs.
RepDB's answer:
Solo developers and small teams building fitness or workout-tracking apps (iOS, Android, web) who need licensed exercise images and structured exercise data, but don't want to build their own media pipeline or depend on a rate-limited third-party API.
RepDB's answer:
RepDB grew out of a consumer workout app its creator was building solo. Sourcing exercise images and data meant either paying for a subscription API with usage caps and no caching rights, or producing everything from scratch. The illustrated, multi-language dataset was built for us first, then split out as its own product once it became clear other indie developers had the same problem and preferred to buy the data outright rather than rent it through an API.
Wallarm - Wallarm WAF is AI-powered Platform that automates real-time application protection combines Active Threat Verification engine with a DevOps friendly NG-WAF and security testing for websites, microservices and APIs across public and private clouds.
Metlo API Security - Open Source API Security Platform
PromptGuard - The firewall for AI prompts.
SecureStack - Comprehensive security compliance for startups building software