Discovering APIs from integrations - Port Swigger

Summary: Burp Suite DAST can now connect to third-party platforms to automatically discover APIs deployed in an environment, with built-in integrations for Amazon API Gateway, Azure API Management, and Google Apigee. Discovered APIs appear in API finder, where users can review them and create scan sites, and custom integrations can push APIs in from other sources via the GraphQL API.
What you should know: APIs that never show up in an inventory never get scanned, and this tooling pulls them in from AWS, Azure, and Apigee gateways automatically - the question is how many of your APIs sit outside those three platforms and stay invisible.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026