APICheck - The DevSecOps toolset for REST APIs

License Documentation Status

APICheck is a complete toolset designed and created for testing REST APIs.

Why APICheck

APICheck focuses not only in the security testing and hacking use cases. The goal of the project is to become a complete toolset for DevSecOps cycles.

The tools are aimed to diverse users profiles:

  • Developers
  • System Administrators
  • Security Engineers & Penetration Testers


Here you can find the complete documentation.


APICheck is being developed by BBVA-Labs Security team members:


APICheck is Open Source Software and available under the Apache 2 license.


Contributions are of course welcome. See CONTRIBUTING or skim existing tickets to see where you could help out.