The State of Public APIs
An analysis of the design, security, reliability and performance 6000+ public APIs by Escape
Download our report
Download our report
Platform
Escape Platform
Replace legacy scanners and manual offensive security processes with AI agents that discover, test, and remediate directly in your engineering workflows.
See moreProducts
AI Pentesting
Run continuous AI-powered pentesting that learns your business, proves exploitability, and delivers reports that auditors and engineers can act on.
Business-logic-aware DAST
Leverage our in-house, AI-powered DAST to secure your applications at the business logic level
External network pentesting
Continuous testing of everything reachable from the internet. Every host, port, and exposed service is probed the way an attacker would, with proof of what's exploitable, followed by a retest.
Attack Surface Management
Discover and validate exposure of modern applications, APIs, and infrastructure from code to cloud.
News
By use case
Use case one
Leverage our in-house, AI-powered DAST to secure your applications at the business logic level
Use case two
Leverage our in-house, AI-powered DAST to secure your applications at the business logic level
Use case three
Leverage our in-house, AI-powered DAST to secure your applications at the business logic level
By industry
Resources
Blog
Explore offensive and application security insights
Customer stories
Learn what our customers achieve with Escape
Documentation
We're here to help you
The Elephant in AppSec Podcast
Listen to other practitioners’ stories
Pentester vs. AI challenges
Can you beat the machine?
Events
Discover our upcoming events across the world
Security Research
Modern AI-powered Pentesting Tools Benchmark
Where the only variable is harness.
Escape Research team found a PII disclosure in Keycloak
It's now CVE-2026-17059.
Escape found the same XSS in two AI chatboxes
The vulnerability was in the Markdown renderer.
State of GraphQL Security 2024
Leverage our in-house, AI-powered DAST to secure your applications at the business logic level
The State of Security of Vibe Coded Apps
How we discovered over 2k high-impact vulnerabilities in apps built with vibe coding platforms
Tools
The State of Public APIs