โ
middleBrick
API security risk scoring platform, Instant API & AI security scan, no setup required.
middleBrick
API Security Risk Scoring Platform
middleBrick scans any API endpoint and returns a security risk score (A+ through F) with actionable findings โ no agents, no config, no credentials required.
How it works
Submit a URL or OpenAPI spec. middleBrick runs 12+ security checks in parallel and delivers a prioritized report with severity ratings and remediation guidance in under 60 seconds. It tests what an unauthenticated attacker would see โ black-box, zero setup.
AI & LLM API Security
The only self-service scanner with dedicated LLM checks: * System prompt leakage detection * Prompt injection testing * Jailbreak probes * Data exfiltration vectors * Excessive agency and cost exploitation
What it covers
OWASP API Security Top 10: * Access Control: BOLA/IDOR and BFLA. * Authentication: Multi-method bypass detection and JWT analysis. * Data Exposure: PII, API keys, and credit cards with Luhn validation. * Technical Vulnerabilities: Input Validation, Rate Limiting, SSRF, and Security Misconfiguration. * Modern Architecture: GraphQL vulnerabilities, Encryption & Transport Security, and API Inventory gaps. * Specifications: Full OpenAPI 2.0/3.0/3.1 spec analysis included.
Built for your workflow
- Dashboard: Scan, track scores, and export PDF compliance reports (SOC 2, PCI-DSS, HIPAA, ISO 27001).
- CLI:
npx middlebrick scanin your terminal or CI pipeline. - GitHub Action: Fail builds when security score drops below threshold.
- MCP Server: Scan from Claude, Cursor, or any MCP-compatible AI tool.
- Open Source
- Freemium
- Free Trial
- $99.0 / Monthly (15 APIS)
- Official Pricing
