flipkart-incubator/Astra
Astra
Astra is a security analysis system and scanner designed to identify vulnerabilities and security flaws in REST API endpoints. It functions as a security testing tool that automatically detects common API weaknesses during development and deployment cycles.
The project provides a graphical interface for triggering and monitoring security scanning processes, removing the requirement for manual command line execution. This management UI allows for the oversight of scanning workflows and the retrieval of vulnerability reports.
The system supports the import of collection files to map endpoints and execute targeted security test suites. Its capabilities include automated vulnerability detection and mapping, as well as integration into DevSecOps pipelines.
Features
- API Security Testing - Provides a specialized system for testing REST API endpoints for security vulnerabilities and flaws.
- API Security Scanning Management - Provides a graphical interface for triggering and monitoring security scanning workflows.
- Automated Vulnerability Detection - Automatically identifies common security weaknesses in web services to reduce manual testing effort.
- Scanners - Implements an automated scanner to detect security flaws in REST API endpoints using imported collections.
- Security Vulnerability Scanning - Analyzes REST API endpoints and collection files to detect common security vulnerabilities.
- Vulnerability Management Interfaces - Offers a graphical interface for managing security scanning processes and vulnerability reports.
- API Collection Runners - Executes targeted security test suites by importing API definition collection files to map endpoints.
- DevSecOps and Automation - Integrates automated security testing into the software delivery cycle for early risk detection.
- REST API Frontends - Ships a browser-based management interface that communicates with the backend via REST API endpoints.
- Scan Process Monitoring - Provides a graphical interface for monitoring the progress of security scanning workflows.
- API Vulnerability Categorization - Provides automated mapping of scan results against security patterns to categorize and prioritize API weaknesses.
- General Web Scanners - Automated security scanner for web applications and APIs.
- Penetration Testing - Automated security testing platform for REST APIs.
- REST API Security Tools - Automated security testing framework for REST APIs.
- Web Exploitation - Automated security testing for REST APIs.
