42crunch-api-security-testing

Automate API security directly in Claude Code with 42Crunch - automatically audit OpenAPI specs, detect vulnerabilities aligned with OWASP API Security risks (including BOLA/BFLA), and apply AI-powered fixes. Designed for AI-assisted development workflows, it provides continuous guardrails through an audit->scan->remediate->validate loop, ensuring APIs meet enterprise security standards before deployment.

Install

If the official marketplace isn’t added yet, run

Category: Security
Author: 42Crunch
GitHub: 42Crunch-AI/claude-plugins
Website: 42crunch.com

Good for

Audit OpenAPI specs for security from inside Claude Code
Detect vulnerabilities aligned with OWASP API Security risks, including BOLA/BFLA
Run conformance and authorization scans against running APIs
Apply AI-assisted fixes in an audit, scan, remediate, validate loop

Getting started

In Claude Code, run /plugin install 42crunch-api-security-testing@claude-plugins-official
Ask Claude in plain language to audit the OpenAPI spec in your project
Have Claude apply the fixes, then rescan to validate

Summarized by AI from the project docs; check the official docs before relying on it.

Similar tools

claude-securityOfficial plugin · Security
Deep vulnerability scanning of your own code, run entirely inside your Claude Code session at a chosen effort tier, with every finding challenged before it is reported and the verification tally computed in code. Turns surviving findings into targeted patches, each verified by a panel of agents, that you apply when you choose.
security-guidanceOfficial plugin · Security
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
auth0Official plugin · Security
Enterprise-grade auth, easy to implement. Add login, SSO, MFA, and access control to any app with framework-aware guidance.
crowdsecOfficial plugin · Security
Operational skill for installing, configuring, operating, and debugging CrowdSec (cscli, LAPI/CAPI, hub, bouncers, WAF/AppSec) across bare-metal, Docker, and Kubernetes.
crowdstrike-falcon-foundryOfficial plugin · Security
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API integration, security patterns, and debugging workflows.