They started with GraphQL but after a while they also developed a security scanner for REST APIs that use OpenAPIs or Swagger[1].

[1] https://escape.tech/blog/rest-security-testing/