Kurokagi
01Authorization security testing for modern APIs. A standalone Go-powered security testing tool that identifies broken API authorization through explicit access policies, multi-identity testing, and evidence-backed verification.
Testing capabilities
- BOLA / IDOR detection
- Horizontal and vertical authorization testing
- OpenAPI-driven checks
- Explicit authorization expectations
- Evidence-backed findings
- Controlled mutation testing
- Targeted vulnerability retesting
- Machine-readable JSON reports