REST API scanning is a feature of our web application service that enables the detection of vulnerabilities in JSON REST APIs. The process involves injecting vulnerability detection patterns into the APIs to identify various vulnerability classes, including SQL injections, XXE, and deserialization issues.
To initiate the scanning process, you need to provide an OpenAPI specification document. This document is parsed by our scanner and serves as the starting point for identifying vulnerabilities in the REST APIs.
Please note that the OpenAPI specification must be published before Holm Security can perform the API scan. This ensures that our scanning system can access and analyze the API effectively.
Additionally, if you have the API specification in a different file format like WADL, we provide the option to convert it to the required OpenAPI format for seamless scanning.
Read our support articles for more detailed information.