I really like the way APISec Scanner automates API scanning. It minimizes most of the manual work required for API Scanning and is easily adoptable. Their support team is very responsive and cooperative too. It also supports seamless integration in CI/CD pipeline, which is something truly amazing! Review collected by and hosted on G2.com.

One thing that I think APISec Scanner is missing is a desktop client. I hope they will build one soon! Review collected by and hosted on G2.com.

I appreciate the opportunity to explore the free courses, and I've found the content to be quite straightforward to understand. It’s a great resource for learning! Review collected by and hosted on G2.com.

I don't have anything I dislike about apisec.ai. Review collected by and hosted on G2.com.

I love how apisec.ai makes complex API security topics simple and actionable. The courses are well-structured, highly practical, and focus on real-world attack scenarios. The platform combines theory and hands-on exercises in a way that makes learning efficient and enjoyable. Great support and up-to-date content make it even better! Review collected by and hosted on G2.com.

Nothing significant to dislike. If I had to mention one thing, it would be nice to have even more advanced-level scenarios or challenges for experienced users. Review collected by and hosted on G2.com.

We have been using Apisec for our API security testing, and honestly, it has been a very good experience. The ease of use is excellent the platform is simple to understand and user-friendly. Our team was able to start using it quickly without any confusion.

The ease of implementation was also very smooth. We didn’t have to make big changes in our system. The setup process was clear, and their team helped us every step of the way.

We are very happy with their customer support. Whenever we had any doubt or issue, their team responded fast and gave helpful solutions. They are friendly and professional.

We now use Apisec regularly the frequency of use is almost daily. It has become an important part of our security process.

The number of features available is very good. From automated tests to clear reports, everything is available in one place. It saves us a lot of time and effort.

Also, the ease of integration with our tools like GitHub, Jenkins, and Slack was very smooth. It works well with our system without any trouble.

Overall, Apisec is a very useful and reliable platform for API security. We strongly recommend it to any team looking to improve their API protection. Review collected by and hosted on G2.com.

Till now, I haven't noticed any negative points it has been working smoothly for us. Review collected by and hosted on G2.com.

apisec.ai has completely transformed how we approach API security. The simplicity of the interface is a breath of fresh air; you can literally start scanning in seconds! But it's not just fast—the clarity and actionable nature of the reports are what truly shine, making it incredibly easy to understand and mitigate risks. It has a magical way of uncovering vulnerabilities that other tools miss, genuinely making our security stronger. And for anyone using OpenAPI or Postman, its native support is a massive bonus. This tool delivers exactly what it promises: quick, effective, and actionable API security insights. Review collected by and hosted on G2.com.

Manual steps might be required for those users to incorporate apisec.ai scans into their automated development workflows. Review collected by and hosted on G2.com.

My favorite feature of apisec.ai is its active and ongoing scanning features. Unlike reactive security tools that only notify you when an attack is happening, apisec.ai actively scans APIs to detect vulnerabilities before they are exploited. Its detailed and actionable reports are also a major benefit, as they enable security teams and developers to comprehend and resolve potential risks effectively. Review collected by and hosted on G2.com.

One thing that one want to add here is, It lacks in providing easy user guide, which helps learners to understand how to add JS files or how to add api files. It would be great, if it guide learners or beginners to learn about these concepts as well. Review collected by and hosted on G2.com.

apisec.ai excels at identifying OWASP API Top 10 issues and logic flaws that are often missed by traditional scanners.

The best part of apisec.ai is how easy it is to onboard and start scanning APIs. The automation reduces the overhead of manual testing, and the scan results are well-categorized with remediation tips. Review collected by and hosted on G2.com.

The tool is powerful, but it currently lacks customization for advanced attack scenarios or chaining vulnerabilities. It would be great to have more control over payload crafting or logic abuse simulations. Review collected by and hosted on G2.com.

What I appreciate most about apisec.ai is its ability to automatically identify and prioritize API vulnerabilities with impressive accuracy. The platform fits seamlessly into our CI/CD pipeline and supports a true shift-left security approach. It saves our team countless hours by continuously testing for a wide range of threats without manual scripting or configuration. The reporting is clear and actionable, making it easier for developers and security teams to collaborate and resolve issues faster. It’s a solid platform that brings real value to API security. Review collected by and hosted on G2.com.

The platform is packed with features, which can make the initial setup a bit daunting for first-time users. While the documentation is helpful, a more guided onboarding experience or interactive tutorials would make the ramp-up smoother. Also, deeper integrations with popular ticketing or collaboration tools could enhance usability. Still, these are minor issues compared to the overall benefits the platform provides. Review collected by and hosted on G2.com.

What impressed me most about apisec.ai is how it automates real-world API attack surfaces in a way that aligns with both red team logic and defensive architecture. The scanner is lightweight, fast, and integrates well into CI/CD workflows, giving meaningful reports instead of noisy static findings. The OWASP coverage is elite — especially the logic-flaw detection, which many tools skip entirely. As someone who builds offensive tools and evaluates modern API firewalls, APIsec feels like a weapon-grade product built for professionals. Review collected by and hosted on G2.com.

One improvement would be adding real-time alerting or anomaly correlation dashboards. While the reports are detailed, a visual heatmap of endpoint risk prioritization would speed up decision-making in live environments. I’d also like to see more support for GraphQL fuzzing — REST is handled well, but GraphQL has unique exposure patterns that deserve deeper attention. Review collected by and hosted on G2.com.

APIsec.ai makes API security testing accessible and automated. I liked how it scans for OWASP API Top 10 issues without needing deep coding knowledge. The UI is clean, and it gives clear, actionable insights on vulnerabilities. It’s perfect for both beginners and professionals. Review collected by and hosted on G2.com.

As a beginner, some advanced features weren’t fully explained, and I wish there were more in-platform tooltips or tutorials. Also, setup for certain APIs took a bit of trial and error. Review collected by and hosted on G2.com.