middleBrick

API Security Risk Scoring Platform

middleBrick scans any API endpoint and returns a security risk score (A+ through F) with actionable findings — no agents, no config, no credentials required.

How it works

Submit a URL or OpenAPI spec. middleBrick runs 12+ security checks in parallel and delivers a prioritized report with severity ratings and remediation guidance in under 60 seconds. It tests what an unauthenticated attacker would see — black-box, zero setup.

AI & LLM API Security

The only self-service scanner with dedicated LLM checks: * System prompt leakage detection * Prompt injection testing * Jailbreak probes * Data exfiltration vectors * Excessive agency and cost exploitation

What it covers

OWASP API Security Top 10: * Access Control: BOLA/IDOR and BFLA. * Authentication: Multi-method bypass detection and JWT analysis. * Data Exposure: PII, API keys, and credit cards with Luhn validation. * Technical Vulnerabilities: Input Validation, Rate Limiting, SSRF, and Security Misconfiguration. * Modern Architecture: GraphQL vulnerabilities, Encryption & Transport Security, and API Inventory gaps. * Specifications: Full OpenAPI 2.0/3.0/3.1 spec analysis included.

Built for your workflow

• Dashboard: Scan, track scores, and export PDF compliance reports (SOC 2, PCI-DSS, HIPAA, ISO 27001).
• CLI: npx middlebrick scan in your terminal or CI pipeline.
• GitHub Action: Fail builds when security score drops below threshold.
• MCP Server: Scan from Claude, Cursor, or any MCP-compatible AI tool.