# AppCheck API Scanner AppCheck API Scanner is a Dynamic Application Security Testing product by AppCheck. It runs in the cloud. Pricing is commercial (contact sales). API vulnerability scanner with support for REST, SOAP, and GraphQL APIs Checked October 2026. ## What is AppCheck API Scanner? AppCheck API Scanner is a dynamic application security testing tool designed to identify vulnerabilities in APIs. The scanner supports multiple API types including REST (JSON), SOAP (WSDL), and GraphQL, providing comprehensive security coverage across different API architectures. The tool performs endpoint discovery through SPA crawling and GraphQL introspection, automatically generating fixture data from Swagger and GraphQL schemas. It includes advanced authentication support, maintaining active sessions and handling various authentication mechanisms such as TOTP and OAuth. The scanner implements request signing capabilities, including HMAC support and AWS v4 request signing, with chainable rules for complex custom signature requirements. It conducts contextual probing of individual API methods and performs payload-based testing to confirm real vulnerabilities. The platform identifies authorization flaws, permission issues such as IDOR (Insecure Direct Object References), and provides comprehensive OWASP vulnerability coverage including injection attacks, XSS, and remote code execution. It supports multi-domain scanning, covering both backend APIs and frontend single-page applications within the same scan. AppCheck provides detailed diagnostic output for manual review and offers remediation guidance based on best practices from OWASP, MITRE, and in-house experts. The scanner can be integrated into the application lifecycle from development through production environments. Tags: DAST, OWASP, REST API, WAF ## Where it fits in your security program (NIST CSF 2.0) - [Protect](https://cybersectools.com/guides/building-protect-program-small-team): helps you prevent attacks and keep data safe. ## Quick facts - Category: [Application Security](https://cybersectools.com/categories/application-security) ยท [Dynamic Application Security Testing](https://cybersectools.com/categories/dast) - Vendor: [AppCheck](https://cybersectools.com/companies/appcheck) - Deployment: Cloud - Company size fit: SMB, Mid-Market, Enterprise - Pricing model: Commercial (contact sales) - Features: 10 listed - Integrations: 2 listed - Website: appcheck-ng.com The full feature and integration lists are on the page for signed-in visitors. ## Where it ranks AppCheck API Scanner is not a pick on the current [Best DAST Solutions for Business](https://cybersectools.com/shortlists/best-dast-solutions). ## AppCheck API Scanner FAQ ### What is AppCheck API Scanner? AppCheck API Scanner is a product by AppCheck in the Dynamic Application Security Testing category. It covers DAST, OWASP and REST API. ### What is the pricing for AppCheck API Scanner? AppCheck API Scanner is a commercial product. For pricing, visit https://appcheck-ng.com/api-security-scanning/ or contact AppCheck. ### What are alternatives to AppCheck API Scanner? Alternatives to AppCheck API Scanner listed on CybersecTools: 1. [Fortra BeSTORM](https://cybersectools.com/tools/fortra-bestorm) - Black box fuzzer and DAST product for application security testing (Commercial) 2. [Intruder Web Application Scanning](https://cybersectools.com/tools/intruder-web-application-scanning) - DAST tool for scanning web apps and APIs for OWASP Top 10 vulnerabilities (Commercial) 3. [Tenable One Web App Scanning](https://cybersectools.com/tools/tenable-web-app-scanning) - DAST solution for web apps and APIs with automated scanning capabilities (Commercial) 4. [Secure Blink ThreatSpy](https://cybersectools.com/tools/secure-blink-threatspy) - DAST platform for web app & API vulnerability scanning with AI-enabled features (Commercial) 5. [Bright Security Bright STAR](https://cybersectools.com/tools/bright-security-bright-star) - AI-powered AppSec platform for DAST, IAST, API security with auto-remediation (Commercial) Compare all AppCheck API Scanner alternatives at [https://cybersectools.com/alternatives/appcheck-api-scanner](https://cybersectools.com/alternatives/appcheck-api-scanner) ### What deployment and organization size does AppCheck API Scanner fit? AppCheck API Scanner is available as a cloud service. It is listed for small businesses, mid-market companies and enterprises. Pricing is commercial. Ask AppCheck for pricing and support terms. ## Compare AppCheck API Scanner with similar solutions - [AppCheck API Scanner vs Fortra BeSTORM](https://cybersectools.com/compare/appcheck-api-scanner-vs-fortra-bestorm) - [AppCheck API Scanner vs Intruder Web Application Scanning](https://cybersectools.com/compare/appcheck-api-scanner-vs-intruder-web-application-scanning) - [AppCheck API Scanner vs Tenable One Web App Scanning](https://cybersectools.com/compare/appcheck-api-scanner-vs-tenable-web-app-scanning) All alternatives to AppCheck API Scanner: [/alternatives/appcheck-api-scanner](https://cybersectools.com/alternatives/appcheck-api-scanner) --- Source: https://cybersectools.com/tools/appcheck-api-scanner For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL). More on AppCheck API Scanner and AppCheck: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md