Show HN: API Security Assessment Tool

Is there a list of egress IP addresses that can be added to an allow ACL ?

No, the entire service is running in GCP as CloudRun. If you have a public facing API with OpenAPI spec you can point and get a free assessment instantly.

You can submit this opensource API to see how the report looks like. http://application.apisec.ai:8080/v2/api-docs

Here is the tool link: https://www.apisec.ai/free-api-pen-test

The design looks great!

Thanks. You can point to your mobile/web API and get an instant assessment report.