apisec.ai valid

Automatically discovered from public files. Ownership management is optional. Inclusion does not imply endorsement or publisher participation.

Manage this listing — optional · Visit publisher ↗

Claim my listing on Agent Web Map for apisec.ai:
1. POST https://agentwebmap.com/v1/sites/apisec.ai/claims and keep claim_id and claim_secret private.
2. Publish the proof: add the line "AgentWebMap ownership: <token>" (token from step 1) to https://apisec.ai/llms.txt, or use the DNS, meta-tag or well-known method the response describes.
3. POST https://agentwebmap.com/v1/sites/apisec.ai/verify with {"claim_id": "...", "claim_secret": "..."}.
4. Save the api_key from the answer; it manages the listing (PATCH https://agentwebmap.com/v1/sites/apisec.ai).
MCP equivalent: tools begin_ownership_claim, then verify_domain, at https://agentwebmap.com/mcp. Docs: https://agentwebmap.com/docs#verify

Corrections or removal requests: contact the directory. Ownership management is optional.

apisec

apisec (APIsec, Inc.) is an AI-based application security platform for application exploit validation. It models how an application works, generates the attacks a real attacker would use, and runs them at runtime, returning proven exploits (with a replay and the fix) instead of unverified findings. Founded in 2018.

Their llms.txt

The beginning of the file, from our validated copy saved 2026-10-21T05:45:12.953Z. Cached copy · Source on apisec.ai

# apisec

> apisec (APIsec, Inc.) is an AI-based application security platform for application exploit validation. It models how an application works, generates the attacks a real attacker would use, and runs them at runtime, returning proven exploits (with a replay and the fix) instead of unverified findings. Founded in 2018.

Key facts:
- Product: the apisec platform works in three stages: Discover, Learn (a living Application Model of endpoints, identity, roles, object ownership and business logic) and Exploit.
- Coverage: business logic, data access, roles, containers, infrastructure and security controls; API and AI-agent flows (BOLA, BFLA, tenant isolation, tool-call authorization).
- Pricing: priced per 100 endpoints. Free plan ($0), Standard ($690/month per 100 endpoints), Pro ($2,750/month per 100 endpoints), Bug Bounty (custom). No credit card required to start.
- Free tools: apisec Surface (free, open-source AI and API discovery that produces an AI-BOM, API-BOM and S-BOM, runs offline) and apisec Bolt (free Chrome extension that discovers APIs as you browse and exports OpenAPI specs).
- Education: APIsec University offers free API security courses and certifications.
- Support: support@apisec.ai

## Product

- [Platform](https://www.apisec.ai/platform): How apisec discovers applications, learns how they work, and exploits them the way an attacker would, on every release.
- [Application Model](https://www.apisec.ai/application-model): The living model of endpoints, identity, roles, object ownership and business logic that every apisec attack is generated from.
- [Exploit Detection](https://www.apisec.ai/exploit-detection): What apisec tests across business logic, data access, roles, containers, infrastructure and security controls.
- [Where apisec fits](https://www.apisec.ai/platform/pipeline): Adding agentic exploit validation at the deploy gate alongside existing deterministic testing.
- [Build vs buy](https://www.apisec.ai/platform/build-vs-buy): Comparing a DIY AI pentesting pipeline with apisec.
- [Why apisec](https://www.apisec.ai/why-apisec): Keep SAST, DAST, SCA and WAF; apisec proves what an attacker can actually exploit.
- [Pricing](https://www.apisec.ai/pricing): Plans priced per 100 endpoints, with FAQs on endpoints, private APIs and deployment.

## Use cases

- [AI agents at runtime](https://www.apisec.ai/use-cases/ai-agents-runtime): Proving cross-agent access, delegated-credential scope, tool-call authorization and tenant boundaries in agent flows.
- [AI-BOM & API-BOM](https://www.apisec.ai/use-cases/ai-bom-api-bom): Building an outside-in inventory of what is actually exposed, not just what was built.
- [API security testing](https://www.apisec.ai/use-cases/api-security-testing): Testing the APIs behind AI agents with the agent's own token: BOLA, BFLA, object ownership and privilege boundaries.
- [Agentic application security](https://www.apisec.ai/use-cases/agentic-app-security): Full exploit chains from entry point to
…

Related sites

Other listed sites in Cybersecurity. See the whole category →

Help agents understand your site

Optionally manage your description, publish terms for agents, review file health, measured discovery requests, publisher clicks and score history. Confirm domain control in your browser using a fresh token in your llms.txt, DNS, meta tag or well-known file. No backlink is required.

Manage this listing → · Agent and API instructions

Machine-readable: GET /v1/resolve?q=apisec.ai · GET /v1/domain/apisec.ai · this page as Accept: application/json or text/markdown · MCP lookup_domain