APIsec.ai excels at fully automated API security testing that mimics real-world attack scenarios. I appreciate how easily it integrates into CI/CD pipelines, allowing for continuous and proactive security validation without manual effort. The platform’s ability to identify critical vulnerabilities — including authentication flaws, data leaks, and broken access controls — has been extremely valuable. The detailed reports with actionable remediation steps make it easy for our developers to fix issues quickly. It truly shifts security left in the development lifecycle Review collected by and hosted on G2.com.

While the platform is highly effective and offers deep automation, there’s a slight learning curve initially—especially for those who are new to API security testing. Review collected by and hosted on G2.com.

APIsec.ai excels in delivering comprehensive, automated API security testing that seamlessly integrates into CI/CD pipelines. Its ability to detect complex vulnerabilities, including business logic flaws and access control issues, ensures robust protection. The platform's user-friendly interface and detailed reporting facilitate swift remediation, while resources like APIsec University support ongoing learning and community engagement. Review collected by and hosted on G2.com.

occasional false positives requiring manual verification, limited customization for advanced testing scenarios, and a steep learning curve for beginners due to limited documentation. Review collected by and hosted on G2.com.

APIsec.ai is completely awesome. Setting it up was so easy, no stress or complicated steps. The best part is how much time it saves. Instead of wasting weeks on manual security testing checks, it quickly scans our API’s and catches issues like business logic bugs or OWASP Top 10 vulnerabilities that we might’ve missed. The reports generated by APIsec.ai are straightforward, so we can fix things before they go into production. Also, their free APIsec University courses are great for learning about API security. I totally loved it. Honestly speaking, it has made our work easier and keeps our API’s very much secure. Review collected by and hosted on G2.com.

I think UI could be a bit more intuitive. But overall i liked apisec.ai very much. Review collected by and hosted on G2.com.

I like that apisec.ai helps find security problems in APIs automatically. It works well with tools developers already use and makes it easy to test for issues early. The reports are clear, and it doesn’t need a lot of setup to get started. It saves a lot of time for both developers and security teams. Review collected by and hosted on G2.com.

It can be a little hard to understand at first if you're new to API security. Some features need better guides or help videos to explain how to use them. Review collected by and hosted on G2.com.

As a Security Researcher, I found APISec.ai incredibly helpful when spinning up API scans. The flexibility to start scans using OpenAPI specs or Postman collections is smooth and saves time. The UI is clean, and the tool performs well with fast feedback. It’s a great platform for practical security testing of APIs without needing extensive setup. It made my workflow faster and more structured — especially for repetitive tasks like scanning public endpoints or validating common API issues. Review collected by and hosted on G2.com.

From a business perspective, the platform could benefit from more advanced features tailored to enterprise use — such as richer analytics dashboards, role-based access, tighter integrations with enterprise CI/CD platforms, and more detailed reporting. These additions would make it even more suitable for large teams and companies managing multiple assets or regulatory needs. Review collected by and hosted on G2.com.

Automated API Security Testing

• apisec.ai continuously scans your APIs for vulnerabilities like OWASP Top 10 (e.g., injection flaws, broken authentication).

• It simulates real-world attacks using dynamic testing (DAST), helping catch issues before they go live. Review collected by and hosted on G2.com.

Learning Curve for Customization

• While the tool offers advanced test case generation, customizing complex test scenarios or business logic validations can take time and expertise.

• Teams may need to invest in understanding the rule engine or scripting interface if they want deep customization. Review collected by and hosted on G2.com.

I like that covers all the top 10 OWASP API security risks. I also like how easy it is to include the APIs needed to be tested, just by adding the json file. Review collected by and hosted on G2.com.

One thing I dislike is how it requires you to set up authentication for the API test, and not allow us to use Public and Private key instead. It feels like my test is not complete up to what they provide. Review collected by and hosted on G2.com.

The automated API scanner is an exceptional tool for developers and organizations. One of its primary strengths is its ease of use, which ensures that even users with minimal experience can navigate and operate it efficiently. Furthermore, its ease of implementation allows for a seamless setup process, minimizing time and effort during the initial stages.

The scanner offers impressive features, catering to a wide range of API testing and security needs. Additionally, its ease of integration with existing systems and workflows makes it a versatile choice for diverse environments. What truly elevates the user experience is the outstanding customer support provided by the team, who are always ready to assist with queries and ensure smooth operations.

Overall, the automated API scanner delivers a comprehensive, user-friendly solution for managing API security and performance with minimal hassle. It’s a valuable asset for any developer or organization. Review collected by and hosted on G2.com.

Everything about the platform's features seems excellent, and there’s nothing to find fault with. Review collected by and hosted on G2.com.

With its strong automation features and easy-to-use interface, APIsec.ai greatly streamlines API security. Especially noteworthy is the smooth integration with current development tools and CI/CD pipelines, which lowers the overhead usually related to manual security assessments. I particularly value the ongoing automated scanning that enables you to promptly detect and fix vulnerabilities, which is in complete harmony with the agile workflows typical of many tech startups in Nigeria.

I mostly use APIsec.ai to fix vulnerabilities listed in the OWASP API Top 10 in order to keep our APIs safe from frequent attacks. Because of the platform's automated testing features, I can easily and often maintain compliance standards, which is essential given how quickly Africa's tech scene is changing and how cybersecurity threats are only increasing. The manual workload is greatly decreased, and I am free to concentrate on more complicated problems rather than regular vulnerability checks.

I use it daily and the support from the discord channel is impressive. If I have any issue that needs fixing, I have the direct email of Dan and he is always willing to help :) Review collected by and hosted on G2.com.

Notwithstanding its advantages, the tool might occasionally generate false positives, necessitating further manual verification and thus delaying the remediation process a little. Review collected by and hosted on G2.com.

I like best about apisec.ai is its automated API scanning capabilities, user-friendly interface, and real-time vulnerability insights that make API security testing fast and effective. The platform integrates well with CI/CD pipelines, helping secure APIs throughout the development lifecycle. and Its Also Save Time Review collected by and hosted on G2.com.

While apisec.ai is a powerful tool, it occasionally flags false positives that require manual analysis. Additionally, the customization options for advanced testing scenarios feel limited, and the documentation for some features could be more detailed to support new users. More in-depth tutorials or guided examples would greatly improve the onboarding experience. Review collected by and hosted on G2.com.