Owasp API Top10 Audit

Paid OWASP API Security Top 10 (2023) one-call composite audit (cycle 151, x402 $0.001) - fetches target URL + probes 24 conventional API paths in parallel via ThreadPoolExecutor, runs all 10 OWASP 2023 category checks: API1 BOLA (compare /api/users/1 vs /api/users/2), API2 Broken Auth, API3 BOPLA (PII keywords + over-exposure), API4 Unrestricted Consumption (no RateLimit-* + huge response), API5

Open endpoint ↗

Price per call: $0.000
Chain: Base
Method: GET
Paid calls · 30 days: 0

Call it from code

This API is run by its own provider and paid directly through x402. We list it so you can find it; we don't route or hold the payment.

import { x402Client, wrapFetchWithPayment } from "@x402/fetch";
import { registerExactEvmScheme } from "@x402/evm/exact/client";

const client = new x402Client();
registerExactEvmScheme(client, { signer: agentAccount });

const pay = wrapFetchWithPayment(fetch, client);
const res = await pay("https://rznxk-38-190-144-122.free.pinggy.net/api/owasp-api-top10-audit", { method: "GET" });
console.log(await res.json());

https://rznxk-38-190-144-122.free.pinggy.net/api/owasp-api-top10-audit