Get Started — Scan Your API in 5 Minutes

Step 1: Set Up Your Free Account

Fill out the simple Free Edition form to get instant access.

Step 2: Register your application

• Click on the Applications menu

• Select “Add Application”

• You’ll need an Open API Specification or GraphQL schema or you can even connect APIsec to your Gateway

• Don’t have an API to test? No problem, use one of ours.
• Select OpenAPI SpecOr use our demo API: https://www.apisec.api/crapi_oas

• Base URL: https://crapi.apisec.ai

Step 3: Click Onboard

• APIsec will immediately start analyzing your application
• Create attack simulations
• Generate the App Model
• And product API Insights

Step 4: Review the App Model

• On the right side you’ll find the App Model.
• This is your personal guide to get the most out of APIsec and ensure your API is fully tested.
• You’ve already completed the first item, Explore your API Composition.
• The next is a test of reachability to your target API. If your application isn’t reachable you might need to whitelist the scanner IPs or deploy a Hosted Agent.

Step 5: Explore your API

• The Endpoints tab provides details about your applications API endpoints, types of methods use, authentication status, and endpoint sensitivity.
• It’s fully interactive, so click the various chart elements and see the matching endpoints below.

• Click the individual endpoints to learn more about their functionality.

Step 6: Review the test coverage

• Visit the Coverage tab to see the volume and types of attack simulations generated.

Step 7: Run an unauthenticated scan

• Now run your first active scan. To start 
• Check reachability status
• Hosted agent

Step 8: Review Vulnerabilities

Check the list of detected issues and understand their impact.

Step 9: Set Up Authentication

Add credentials to scan protected API endpoints.

Step 10: Run an Authenticated Scan

Launch a deeper scan to uncover hidden vulnerabilities.