Listed alphabetically. A tool is ranked by its reviews once it has 3.
Security scanning tools with a public API Tool Reviews Lowest paid plan Free plan Free trial Public API Runs on Main features Aikido Security Continuous, autonomous security that gets developers back to building. Reviews None yet Write one for Aikido Security Lowest paid plan $350 per month Basic, as of November 14, 2026 Free plan YesFree trial Not confirmed Public API YesRuns on Not confirmed Main features Dependency scanning SAST and AI SAST Secrets detection Burp Suite DAST DAST with pentester depth, using the same scanning engine as Burp Suite Professional. Reviews None yet Write one for Burp Suite DAST Lowest paid plan Not confirmed Free plan Not confirmed Free trial Not confirmed Public API YesRuns on Windows, Linux, Kubernetes Main features Detectify External attack surface and application security scanning, built by ethical hackers. Reviews None yet Write one for Detectify Lowest paid plan €2,500 Standard, as of November 14, 2026 Free plan YesFree trial 2 weeksPublic API YesHostedScan Online automated vulnerability scanner to secure firewalls, servers, web applications, and apis. Reviews None yet Write one for HostedScan Lowest paid plan $39 per month, 5 targets included Basic, as of November 14, 2026 Free plan Not confirmed Free trial Not confirmed Public API YesRuns on Invicti Web + API An end-to-end web security scanner covering web applications, web services and APIs. Reviews None yet Write one for Invicti Web + API Lowest paid plan Not confirmed Free plan Not confirmed Free trial Not confirmed Public API YesRuns on Cloud hosting Main features Probely A web application and API vulnerability scanner for agile teams. Reviews None yet Write one for Probely Lowest paid plan See plans Free plan YesFree trial 14 daysPublic API YesSemgrep An extensible developer-friendly application security platform. Reviews None yet Write one for Semgrep Lowest paid plan $30 per contributor per month Teams, as of November 14, 2026 Free plan YesFree trial Not confirmed Public API YesSocket Socket blocks malicious packages before they reach your code. Reviews None yet Write one for Socket Lowest paid plan $25 per dev seat per month Team, as of November 14, 2026 Free plan YesFree trial Not confirmed Public API Yes
From each tool's own website. “Not confirmed” means we couldn't confirm it there, not that the tool doesn't have it. Each tool's page says when its facts were checked.
How this list is made A tool is listed here only when we've confirmed on its own website that it has a public API. Tools we couldn't confirm it for are left out, even if they may have it. Vendors can't pay for a place on this list. Add a tool we missed