

middleBrick
Scan your APIs for prompt injection and 12 security checks in less than a minute, MCP, CLI and GH Action ready to CI/DI integration.
Cost / License
- Freemium (Subscription)
- Proprietary
Platforms
- Online
- Software as a Service (SaaS)
Features
middleBrick News & Activities
Recent activities
- POX updated middleBrick
- Izval added middleBrick
Izval added middleBrick as alternative to Burp Suite, Zed Attack Proxy (ZAP), Invicti (Netsparker) and Astra Pentest
middleBrick information
What is middleBrick?
middleBrick scans your APIs and assigns a quantified security risk score. No agents to install, no SDKs, no credentials required. Paste a URL, get a security score with actionable findings in under 60 seconds.
The engine runs 12 parallel security checks covering the OWASP API Top 10: authentication bypass, IDOR, BOLA, BFLA, SSRF, data exposure, rate limiting bypass, mass assignment, and more. For AI/LLM endpoints, 18 adversarial probes test for prompt injection, jailbreaks, system prompt extraction, encoding bypasses, PII exfiltration, and cost exploitation attacks.
Supports REST, GraphQL, and AI/LLM APIs across 30+ frameworks (FastAPI, Express, Spring Boot, Django, NestJS, Rails, Laravel, and more) and 15+ LLM providers (OpenAI, Anthropic, Gemini, Mistral, AWS Bedrock, Azure OpenAI).
All scanning is read-only. No destructive payloads, no state changes. Authenticated scanning requires verified domain ownership via DNS or HTTP, so only API owners can scan with credentials.
Available as a web dashboard, CLI, GitHub Action for CI/CD gates, and MCP Server. Compliance reporting for GDPR, PCI-DSS, HIPAA, SOC 2, ISO 27001, and NIST.
Free tier includes 3 scans per month. Paid plans start at $99/mo.




