Escape is the API discovery and security platform built to help Application Security engineers.

View exposed API endpoints and sensitive data in minutes, continuously test as APIs evolve, prioritize business-critical vulnerabilities, and fix them efficiently with actionable remediation code snippets. No traffic monitoring, agents, or complex integrations required.

Yes, we're here to help you prioritize and win the respect of your development team 😉

We believe it’s time to bring more AI-driven innovation to cybersecurity, and we'd love your help in building this dream! Want to join our adventure? Check out our Careers page!

At Escape, in addition to our work on API security, we've also been developing some fantastic open-source projects. Let us introduce you to all of them 🚀

• API Security Academy, an interactive platform dedicated to helping you learn how to secure #graphql applications.

• Goctopus, a GraphQL endpoint discovery and fingerprinting tool.

• GraphQL wordlist, the only GraphQL wordlist for #pentesting you'll ever need. Operations, field names, type names... It was collected on more than 60k distinct GraphQL schemas.

• GraphQL Armor, a middleware for Apollo GraphQL Server that adds a security layer to any GraphQL endpoint in minutes. It's also compatible with The Guild Software's Envelop universal plugin system.

• GraphMan, a tool that helps you to scaffold a Postman collection for a GraphQL API. Compatible with Postman & Insomnia from Kong Inc.

• Graphinder, a lightweight and blazing-fast GraphQL endpoint finder, making penetration testing on GraphQL much faster

• Mookme, a git hook manager, designed monorepos for dealing with different projects and languages, automated filtering, and ease of configuration and setup.

• PyMultiAuth, an open-source Python library that allows users to authenticate and reauthenticate automatically.

• We'd be happy to see you at our upcoming virtual events.

• The Elephant in AppSec podcast & upcoming virtual event.

• Escape API Security Blog: Learn about GraphQL security, API security, performance, testing, and building production-ready APIs with the latest ecosystem tools and best practices! We also share lots of in-depth technical walkthroughs.

• Follow us on LinkedIn to get the latest updates from our team and connect with team members!

• Join our Slack community we're looking forward to welcome you! Ask us questions and share the feedback with others!

• Follow us on Twitter to watch the occasional joke passing by and stay in touch!

• Have any suggestions? Feel free to drop us a line. We're always open to feedback! Don't be shy 😊