vAPI — Full OWASP API Top 10 Security Assessment
Full technical assessment of the self-hosted vAPI training application covering all ten OWASP API Top 10 (2019) categories plus JWT, SSRF, and XSS Arena challenges.
Complete reports are kept separate from the short case summaries. PDF reports open directly in the browser's native PDF viewer so the full document can use the available screen space.
vAPI — Full OWASP API Top 10 Security Assessment
Full technical assessment of the self-hosted vAPI training application covering all ten OWASP API Top 10 (2019) categories plus JWT, SSRF, and XSS Arena challenges.
crAPI Vulnerability Assessment
A security assessment of the crAPI application covering identified vulnerabilities, exploitation paths, security impact, and recommended remediation.
Read full report →VulnBank — Penetration Testing Report
Full penetration-testing report covering vulnbank.org, the VulnBank Android application, and the VulnBank GitHub repository.
Read full report →