Assess APIs from the inputs your team already has.
Eresus Workbench accepts authorized API inputs and keeps each assessment with its project, findings, and review evidence.
Import API inputs in Ingest.
Add a URL, URL list, HTTP request and response, OpenAPI definition, or Postman collection to the project in Ingest.
Keep API findings with their supporting HTTP Records.
Workbench links API findings to HTTP Records produced during the assessment. Engineering and security teams can inspect the same request and response before a retest.
Three steps from approved scope to a reviewable result.
- 1
Add an authorized API input to the project.
- 2
Set scope and authentication before the assessment runs.
- 3
Review HTTP evidence, export results, and verify the remediation.