Skip to content
@Escape-Technologies

Escape - API discovery & security platform

Built to help security teams manage their API Inventory and fix API vulnerabilities.
README.md

👋 Welcome to our repo

Escape

Escape


Our Website   •   API Security Blog   •   API Security Academy   •   Case Studies   •   Docs

👋 Hello again

Escape is the API discovery and security platform built to help Application Security engineers.

Securing APIs shouldn't be this hard. With Escape, you can quickly inventory all APIs, detect OWASP Top 10 and complex logic flaws at scale, and adopt security in CI/CD. No agent, no proxy are required. And we assist developers with detailed remediation snippets 😉

🤝 Join our team

We believe it’s time to bring more AI-driven innovation to cybersecurity, and we'd love your help in building this dream! Want to join our adventure? Check out our Careers page!

🧙 Open source repos

At Escape, in addition to our work on API security, we've also been developing some fantastic open-source projects. Let us introduce you to all of them 🚀

  • API Security Academy, an interactive platform dedicated to helping you learn how to secure #graphql applications.

  • Goctopus, a GraphQL endpoint discovery and fingerprinting tool.

  • GraphQL wordlist, the only GraphQL wordlist for #pentesting you'll ever need. Operations, field names, type names... It was collected on more than 60k distinct GraphQL schemas.

  • GraphQL Armor, a middleware for Apollo GraphQL Server that adds a security layer to any GraphQL endpoint in minutes. It's also compatible with The Guild Software's Envelop universal plugin system.

  • GraphMan, a tool that helps you to scaffold a Postman collection for a GraphQL API. Compatible with Postman & Insomnia from Kong Inc.

  • Graphinder, a lightweight and blazing-fast GraphQL endpoint finder, making penetration testing on GraphQL much faster

  • Mookme, a git hook manager, designed monorepos for dealing with different projects and languages, automated filtering, and ease of configuration and setup.

  • PyMultiAuth, an open-source Python library that allows users to authenticate and reauthenticate automatically.

👀 Upcoming events & Resources

👋 Stay in touch

Pinned Loading

  1. graphql-armor graphql-armor Public

    🛡️ The missing GraphQL security security layer for Apollo GraphQL and Yoga / Envelop servers 🛡️

    TypeScript 472 28

  2. awesome-graphql-security awesome-graphql-security Public

    A curated list of awesome GraphQL Security frameworks, libraries, software and resources

    287 21

  3. graphql-wordlist graphql-wordlist Public

    The only GraphQL wordlist you'll ever need. Operations, field names, type names... Collected on more than 60k distinct GraphQL schemas.

    TypeScript 295 30

  4. graphman graphman Public

    Quikly scaffold a postman collection for a GraphQL API. Compatible with Postman & Insomnia.

    TypeScript 240 11

  5. mookme mookme Public

    A pre-commit tool designed for monorepos.

    TypeScript 94 16

  6. goctopus goctopus Public

    Blazing fast GraphQL discovery & fingerprinting toolbox.

    Go 95 9

Repositories

Showing 10 of 30 repositories
  • python-project-template Public template

    Professional grade typed Python 3.7+ project scaffold with contemporary-relevant testing, linting and formatting rules.

    Escape-Technologies/python-project-template’s past year of commit activity
    Makefile 4 MIT 1 0 6 Updated Jun 30, 2024
  • graphql-armor Public

    🛡️ The missing GraphQL security security layer for Apollo GraphQL and Yoga / Envelop servers 🛡️

    Escape-Technologies/graphql-armor’s past year of commit activity
    TypeScript 472 MIT 28 4 13 Updated Jun 29, 2024
  • mookme Public

    A pre-commit tool designed for monorepos.

    Escape-Technologies/mookme’s past year of commit activity
    TypeScript 94 MIT 16 16 (3 issues need help) 2 Updated Jun 25, 2024
  • gitlab-discord-bot Public

    The Bot that brings your Gitlab notifications directly in Discord.

    Escape-Technologies/gitlab-discord-bot’s past year of commit activity
    TypeScript 8 MIT 3 0 0 Updated Jun 21, 2024
  • docs Public

    docs.escape.tech

    Escape-Technologies/docs’s past year of commit activity
    JavaScript 4 MIT 3 0 0 Updated Jun 6, 2024
  • graphql-security-academy Public

    🔒 A free, open-source platform dedicated to understand and secure GraphQL applications — all directly in your browser!

    Escape-Technologies/graphql-security-academy’s past year of commit activity
    Svelte 46 AGPL-3.0 1 0 0 Updated May 24, 2024
  • repeater Public

    A proxy client to scan internal APIs with Escape

    Escape-Technologies/repeater’s past year of commit activity
    Go 1 AGPL-3.0 1 0 1 Updated May 22, 2024
  • escape-rules Public

    A community-driven list of custom Escape rules. Test your API security with rules that automatically adapt for you.

    Escape-Technologies/escape-rules’s past year of commit activity
    1 MIT 0 0 0 Updated Mar 14, 2024
  • action Public
    Escape-Technologies/action’s past year of commit activity
    Dockerfile 3 MIT 1 0 1 Updated Feb 23, 2024
  • .github Public
    Escape-Technologies/.github’s past year of commit activity
    0 0 0 0 Updated Feb 19, 2024
View all repositories

Top languages

Loading…

Most used topics

Loading…