Backend Audit
Endpoint checks for uptime, response time, status codes, auth, rate limits, CORS, headers, error leakage, webhooks, validation, and dependencies.
Accepted inputs
https://api.example.com/health
Paste OpenAPI JSON/YAML
Deterministic checks
API health
Measure status, latency, redirects, and response headers.
CORS
Check CORS policy and risky wildcard combinations.
Error leakage
Probe safe invalid paths for stack traces and framework leakage.
OpenAPI validation
Parse OpenAPI schemas, auth schemes, and validation gaps.
Report sections
Related free tools
Live tools return real evidence. Registered tools stay disabled until the runner exists.
API Health Checker
Probe a public API endpoint for status, response time, content type, cache policy, and server hints.
CORS Checker
Fetch a public endpoint and inspect CORS headers for wildcard origins, credentials, and broad method exposure.
OpenAPI Checker
Look for public OpenAPI/Swagger JSON at the submitted URL or common spec paths and report paths/auth schemes.
Webhook Security Checker
Safely check a public webhook endpoint for reachability, unauthenticated GET behavior, signature hints, and error leakage.
Rate Limit Checker
Send a tiny safe sample of repeated public requests and report latency and any HTTP 429 rate-limit signal.