Escape automates the full offensive security lifecycle, multiplying the impact of every security engineer tenfold. Our goal is to replace legacy scanners and manual offensive security processes with AI agents that discover, test, and remediate directly in your engineering workflows 😉

We believe it’s time to bring more AI-driven innovation to cybersecurity, and we'd love your help in building this dream! Want to join our adventure? Check out our Careers page!

At Escape, alongside our work on application discovery, API security, and Dynamic Application Security Testing (DAST), we've also been developing some fantastic open-source projects. Let us introduce you to all of them 🚀

• API Security Academy, an interactive platform dedicated to helping you learn how to secure #graphql applications.

• Goctopus, a GraphQL endpoint discovery and fingerprinting tool.

• GraphQL wordlist, the only GraphQL wordlist for #pentesting you'll ever need. Operations, field names, type names... It was collected on more than 60k distinct GraphQL schemas.

• GraphQL Armor, a middleware for Apollo GraphQL Server that adds a security layer to any GraphQL endpoint in minutes. It's also compatible with The Guild Software's Envelop universal plugin system.

• GraphMan, a tool that helps you to scaffold a Postman collection for a GraphQL API. Compatible with Postman & Insomnia from Kong Inc.

• Graphinder, a lightweight and blazing-fast GraphQL endpoint finder, making penetration testing on GraphQL much faster

• Mookme, a git hook manager, designed monorepos for dealing with different projects and languages, automated filtering, and ease of configuration and setup.

• PyMultiAuth-Archived, an open-source Python library that allows users to authenticate and reauthenticate automatically.

• We'd be happy to see you at our upcoming virtual events.

• The Elephant in AppSec podcast & virtual event.

• Escape Security Blog: Dive into the world of application & offensive security, API security and GraphQL security. Explore performance optimization, testing strategies, and best practices for building secure APIs & SPA! We also share lots of in-depth technical walkthroughs.

• Follow us on LinkedIn to get the latest updates from our team and watch the occasional joke passing by!

• Join our Slack community we're looking forward to welcome you! Ask us questions and share the feedback with others!

• Follow us on X to stay in touch!

• Have any suggestions? Feel free to drop us a line. We're always open to feedback! Don't be shy 😊