Documentation
  • ๐ŸปIntro
    • Why API Security is Critical?
    • Pynt at a Glance
    • Who Should Use Pynt?
  • ๐Ÿ‘ฉโ€๐Ÿ’ปAPI Security Testing
    • Security Testing Overview
    • Prerequisites for Running Pynt Scans
    • How to Install Pynt CLI
    • How to install Pynt Binary (Linux only)
    • Pynt CLI Modes
      • ๐Ÿ”ตPynt Command CLI Mode
      • ๐Ÿ”ตPynt Listen CLI Mode
    • Pynt Security Tests Coverage
      • Business Logic Tests
      • Injection Tests
      • Authentication Bypass Tests
      • Mass Assignment Tests
      • Server-Side Request Forgery Tests
      • Stack Trace In Response
      • Lack of Resources and Rate Limiting
      • File Path Manipulation
      • GraphQL Introspection Vulnerability
      • GraphQL Alias Overloading
      • LLM APIs Vulnerabilities
      • Insecure Transport Scheme
      • Basic Authentication
      • HTTP Desynchronization (Desync) Attack
    • Sensitive Data Exposure Detection
    • Pynt Scans Troubleshooting
      • Pynt CLI Troubleshooting
      • Pynt for Postman Troubleshooting
        • Troubleshoot Pynt Container not Running Error
        • Troubleshoot Empty API Key Error
        • Troubleshoot Unauthorized API Key Error
        • Troubleshoot Collection Not Found Error
        • Troubleshoot Non-Unique Collection Name Error
        • Troubleshoot Empty Collection Identifier Error
        • Troubleshoot Unreachable Target Error
        • Troubleshoot Target Responds with Errors Error
        • Troubleshoot Unresolved Target Domain Error
        • Troubleshoot Unresolved Variable Error
        • Troubleshoot TLS Handshake Fail Error
        • Troubleshoot Few Requests Error
        • Troubleshoot One User Only Error
        • Troubleshoot Failed Assertions Error
    • How To
      • How to Run Business Logic Tests with Pynt
      • How to associate a Pynt scan to an Application in Pynt Dashboard
      • How to tag a scan in Pynt
    • Benchmarks
      • Pynt vs OWASP crAPI
  • ๐ŸคฒSecurity Testing Integrations
    • ๐ŸŸ Pynt with API Testing Tools
      • ๐Ÿ”˜Pynt for Postman
        • Fork Pynt Collection
        • Run Pynt Container
        • Run Pynt in Postman
        • View Scan Results in Postman
      • ๐Ÿ”˜Pynt for Insomnia
      • ๐Ÿ”˜Pynt for ReadyAPI
    • ๐ŸŸ Pynt with API Testing CLIs
      • ๐Ÿ”˜Pynt for Newman (Postman CLI)
      • ๐Ÿ”˜Pynt for TestRunner (ReadyAPI CLI)
    • ๐ŸŸ Pynt with Testing Frameworks
      • ๐Ÿ”˜Pynt for .NET (xUnit)
      • ๐Ÿ”˜Pynt for Selenium
      • ๐Ÿ”˜Pynt for Rest Assured
      • ๐Ÿ”˜Pynt for Jest
      • ๐Ÿ”˜Pynt for pytest
      • ๐Ÿ”˜Pynt for Go
      • ๐Ÿ”˜Pynt for JMeter
    • ๐ŸŸ Pynt on CI/CD
      • โ—How to get Pynt ID for CI/CD Authentication
      • ๐Ÿ”˜Pynt for GitHub Actions
      • ๐Ÿ”˜Pynt for Azure DevOps Pipelines
      • ๐Ÿ”˜Pynt for GitLab
      • ๐Ÿ”˜Pynt for Jenkins
    • ๐ŸŸ Pynt with Burp Suite
    • ๐ŸŸ Pynt with Browsers
      • ๐Ÿ”˜Pynt for Firefox Browser
    • ๐ŸŸ Live Traffic Connectors
      • ๐Ÿ”˜eBPF
        • ๐Ÿ”˜Key Components
      • ๐Ÿ”˜Traffic Mirroring
    • ๐ŸŸ Advanced Pynt Examples
      • ๐Ÿ”˜Pynt as a Standalone Container
      • ๐Ÿ”˜Pynt with Prerecorded Har Files
      • ๐Ÿ”˜Pynt with cURL
  • ๐ŸˆธApplications View
    • Application View Overview
    • Manage Applications
      • Add Application
      • Delete Application
      • Rename Application
    • Manage Sources for API Discovery
      • Add Source
      • Delete Source
      • View Source Info
      • Source Categories
        • API Documentation
          • Swagger
          • Postman Collection
        • API Gateways
          • AWS API Gateway
          • Azure API Gateway
          • Kong API Gateway
          • GCP API Gateway
          • Gravitee API Gateway
        • Testing (API Security Scans)
        • Live Traffic
          • Data Collection with eBPF
          • ALB Traffic Capture with AWS Traffic Mirroring
        • Code Repository
    • Application Dashboard
    • Generate Pentest Report
  • ๐Ÿ“šAPI Catalog
    • API Catalog Overview
    • Navigate API Catalog
      • Filtering API Catalog by Application
      • API Catalog Customization
      • API Related Info
      • APIs at Risk
    • Manage API Source Gaps
      • New APIs
      • Untested APIs
      • Shadow APIs
      • Undocumented APIs
    • View Detailed Endpoint Info
  • โชScan History
    • Scan History Overview
    • Navigate Scan History
      • Associating Scans with Specific Application
      • Filtering by Application
      • Scan Related Info
      • Scan History Customization
    • View Detailed Scan Info
    • Associate Vulnerabilities to Tickets with JIRA
  • Account Management
    • Single Sign-On (SSO)
      • Setting up Okta
      • Setting up Entra ID
Powered by GitBook
On this page
  • Key Features
  • Pynt's Major Components
  • Who Should Use It?
  • How Pynt Security Testing Works
  1. Intro

Pynt at a Glance

Learn how Pynt automates API security with contextual analysis, real-world attack simulations, API discovery, and continuous monitoring.

PreviousWhy API Security is Critical?NextWho Should Use Pynt?

Last updated 5 months ago

At a Glance: ๐Ÿš€ Pynt automates API security testing with real-world attack simulations, contextual analysis for accurate vulnerability detection, discovers undocumented APIs, and integrates seamlessly into your CI/CD pipeline for continuous protection.

Pynt is a cutting-edge API security platform that automates vulnerability detection using context-aware attack simulations. Its contextual analysis makes it more precise by understanding how APIs function within specific environments, leading to fewer false positives and more relevant findings.

Key Features

  • Shift-Left Security: ๐Ÿ•’ Introduces security early in the development lifecycle, enabling developers to detect vulnerabilities before production.

  • Contextual Analysis for Attack Simulation: ๐Ÿ” Pynt analyzes the context of your API traffic, understanding the unique behavior of your APIs. This results in more accurate attack simulations tailored to your specific environment.

  • Business Logic Security: ๐Ÿ”’ Pynt identifies vulnerabilities related to business logic that conventional tools often miss.

  • Continuous Monitoring: ๐Ÿ”„ Integrates with CI/CD pipelines for ongoing, automated API security checks.

  • Comprehensive API Discovery: ๐Ÿ“š Automatically discovers shadow and undocumented APIs through the API catalog feature, ensuring no API endpoint is left unmonitored.


Pynt's Major Components

Pynt consists of two main components:

  1. Pynt Security Tests: These are deployed via a container and can be run locally or in the CI/CD pipeline. This is part of Pynt's and is accessible via . Designed for running automated security scans.

  2. Pynt SaaS: A centralized platform that allows security owners to manage all APIs and scans in one place. Available with the , this component is accessible via .


Who Should Use It?

๐Ÿ’ก Pynt Security Tests: Ideal for security owners but also developers, testers, DevSecOps teams who need to run automated API security scans, either locally leveraging Pynt from their existing tools or within CI/CD pipelines.

๐Ÿ’ก Pynt SaaS: Designed for security owners who want a unified view of all APIs, scan results, and the ability to manage and monitor the security testing process across their organization.


How Pynt Security Testing Works

Pynt captures and analyzes your API traffic to simulate real-world attacks. Using its contextual analysis, Pynt verifies the success of attacks, ensuring highly accurate results with minimal false positives. This tailored approach helps to catch real vulnerabilities while avoiding unnecessary alerts.

Coverage Includes:

By automating both security testing and API discovery with contextual analysis, Pynt provides comprehensive coverage, ensuring that your APIs meet industry-standard security benchmarks.

OWASP API Security Top 10: Targeting critical risks in APIs like broken object-level authorization and excessive data exposure.

OWASP Top 10 for Web Applications: Identifying common web vulnerabilities, including injection and broken authentication.

OWASP Top 10 for LLMs: Addressing new risks posed by large language models interacting with APIs.

๐Ÿ‘‰ .

๐Ÿ‘‰

๐Ÿป
free Starter Plan
www.pynt.io
Business Plan
app.pynt.io
Learn more
Learn more
Learn more
Get started with integrating Pynt into your CI/CD
Get started with building your API Catalog
Pynt's Catalog
Github Actions example