intruder-io/autoswagger
Autoswagger by Intruder - detect API auth weaknesses
Build with Backblaze B2
SDKs, agent skills, IDE extensions, and reference pipelines from Backblaze Labs. All open source.
Loading star history...
Where it stands
Rank, growth pace and release cadence relative to everything GStars tracks.
The project lists 4 contributors on GitHub.
Gained 74% fewer stars in the last 90 days than in the 90 days before.
Use Cases & Benefits
- Detects unauthenticated API endpoints by discovering, parsing, and testing Swagger/OpenAPI specifications for security weaknesses.
- Automates PII and secret exposure detection using Presidio and regex, enabling efficient identification of sensitive data leaks.
- Use for security auditing of public APIs to find unprotected endpoints exposing personal or sensitive information.
- Use for penetration testing teams to automate discovery and testing of API authorization flaws across multiple endpoints.
- Use for developers integrating security checks into CI pipelines to catch API auth weaknesses before deployment.
Should you depend on it?
License terms, project hygiene and risks, from GitHub metadata and GStars' snapshots.
License
BSD 3-Clause
Permissive: commercial use, modification and redistribution are allowed with attribution.
Community files
- README: present
Watch-outs
- Warning: No commits in over a year (last push Aug 2025).
- No GitHub releases; pin a commit or tag instead of a release.
General guidance from repository metadata, not legal advice. How we score
From the README
Autoswagger is a command-line tool designed to discover, parse, and test for unauthenticated endpoints using Swagger/OpenAPI documentation. It helps identify potential security issues in unprotected endpoints of APIs, such as PII leaks and common secret exposures.
Please note that this initial release of Autoswagger is by no means complete, and there are some types of specification which the tool does not currently handle. Please feel free to use it as you wish, and extend its detection capabilities or add detection regexes to cover your specific use-case!
Autoswagger automates the process of finding OpenAPI/Swagger specifications, extracting API endpoints, and systematically testing them for PII exposure, secrets, and large or interesting responses. It leverages Presidio for PII recognition and regex for sensitive key/token detection.
Daily snapshots
Stars gained per day, and how forks and open issues moved, from GStars' daily snapshots
Forks
181+0
Open issues
12+0
Compared with peers in API
Fastest-growing repositories GStars tracks in this cohort for the week of Nov 1, by 7-day star growth
| Repository | Stars | +7d | Health | Last release |
|---|---|---|---|---|
| vxcontrol/pentagi | 33.5K | +712 | 38 | 31 days ago |
| usebruno/bruno | 48.2K | +281 | 59 | 14 days ago |
| agentgateway/agentgateway | 6.0K | +183 | 60 | 9 days ago |
| mudler/LocalAI | 50.2K | +176 | 59 | 12 days ago |
| sveltejs/svelte | 88.6K | +77 | 65 | 9 days ago |
| intruder-io/autoswagger | 2.0K | — | 7 | — |
| Category median | 48.2K | +183 | 59 | — |
Discover Repositories
Search across tracked repositories by name or description