api-audit

You can audit API endpoints across multiple frameworks to detect missing input validation schemas and unprotected authentication middleware. The scan inventories route handlers and applies conformance checks to surface security gaps and inconsistent auth requirements.

Yes, you can scan FastAPI, Express, Fastify, and Next.js API routes to validate REST naming conventions and method-path alignment. The audit extracts route metadata to detect parameter naming inconsistencies and versioning issues across your endpoints.

An API health scorecard includes a prioritized list of critical issues, warnings, and actionable suggestions for naming, response shapes, validation, and authentication. It scores overall API health by evaluating extracted route metadata and detected middleware.

Check for unprotected endpoints by running an audit to identify missing auth middleware and inconsistent authorization requirements across your route handlers. The scan produces a prioritized remediation plan highlighting security gaps and rate-limit blind spots before release.

Yes, the audit works with Zod, Joi, and Pydantic validation schemas to identify missing input schemas across your API endpoints. It detects these validation frameworks during route metadata extraction to ensure conformance and surface untyped response shapes.

Common API design flaws found during an endpoint inventory include inconsistent naming conventions, untyped or mismatched response shapes, missing input validation schemas, and authentication or authorization gaps. The audit surfaces these issues to help prioritize fixes.