OWASP/OFFAT

View on GitHub

The OWASP OFFAT tool autonomously assesses your API for prevalent vulnerabilities, though full compatibility with OAS v3 is pending. The project remains a work in progress, continuously evolving towards completion.

Stars: 673
Forks: 92
Open beginner issues: 0
Indexed issues: 7

Dominant language: Python
License: MIT
Last GitHub push: Aug 18, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: No code of conduct
Beginner labels: No beginner labels indexed
PR merge metrics: No merged PRs in 30d

Beginner friendly Everything

Open All

7 open issues indexed

Getting "Client OS Error" when I am trying to test with bearer token Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

OWASP/OFFAT#145 · 4 comments · Opened Jan 30, 2025
Inquiry Regarding Vulnerability Report and Authentication Error Handling in OFFAT Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

OWASP/OFFAT#144 · 7 comments · Opened Jan 23, 2025
Error in Parsing the YAML Config File Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

OWASP/OFFAT#142 · Opened Dec 1, 2024
Option to bypass host availability check Open

bug

OWASP/OFFAT#131 · 2 comments · 2 reactions · 1 assignee · Opened Aug 14, 2024
Support for HTTP/2 Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

OWASP/OFFAT#116 · 5 comments · Opened Jun 13, 2024
Add automated tests Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

OWASP/OFFAT#106 · 1 comment · Opened May 12, 2024
False negative related to SQL Injection Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

OWASP/OFFAT#100 · 3 comments · Opened May 6, 2024

OWASP/OFFAT

Get new issues in your inbox