API Security Testing Software from Port Swigger

Summary: PortSwigger's Burp Scanner now includes built-in API security testing, letting users scan APIs as part of a wider web app crawl and audit or as a standalone, including uploading an API definition file directly and scanning APIs that require authentication. The company says many web vulnerability scanners lack visibility into APIs, and that Burp Scanner is used by over 70,000 users across more than 16,000 organizations.
Why it matters: The page cites a TechValidate survey of PortSwigger customers finding organizations concerned about finding vulnerabilities in APIs and microservices, and frames the stake plainly: what you can't see, you can't test.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026