middleBrick icon
middleBrick icon

middleBrick

Scan your APIs for prompt injection and 12 security checks in less than a minute, MCP, CLI and GH Action ready to CI/DI integration.

Homepage

Cost / License

  • Freemium (Subscription)
  • Proprietary

Platforms

  • Online
  • Software as a Service (SaaS)
Dashboard
middleBrick alternatives  
0likes
14alternatives
0articles
Save

Features

Highlights All activities

middleBrick News & Activities

Recent activities

middleBrick information

  • Developed by

    MX flagmiddleBrick

  • Licensing

    Proprietary and Freemium product.

  • Pricing

    Subscription ranging between $99 and $499 per month + free version with limited functionality.

  • Written in

  • Alternatives

    14 alternatives listed

  • Badge

    Get an embeddable badge for middleBrick

  • Supported Languages

    • English

AlternativeTo Categories

Development, Security & Privacy, AI Tools & Services

GitHub repository

  •  0 Stars
  •  0 Forks
  •  0 Open Issues
  •   Updated  

Popular alternatives

View all
middleBrick was added to AlternativeTo by Izval on and this page was last updated .

No comments or reviews, maybe you want to be first?

Official Links

What is middleBrick?

middleBrick scans your APIs and assigns a quantified security risk score. No agents to install, no SDKs, no credentials required. Paste a URL, get a security score with actionable findings in under 60 seconds.

The engine runs 12 parallel security checks covering the OWASP API Top 10: authentication bypass, IDOR, BOLA, BFLA, SSRF, data exposure, rate limiting bypass, mass assignment, and more. For AI/LLM endpoints, 18 adversarial probes test for prompt injection, jailbreaks, system prompt extraction, encoding bypasses, PII exfiltration, and cost exploitation attacks.

Supports REST, GraphQL, and AI/LLM APIs across 30+ frameworks (FastAPI, Express, Spring Boot, Django, NestJS, Rails, Laravel, and more) and 15+ LLM providers (OpenAI, Anthropic, Gemini, Mistral, AWS Bedrock, Azure OpenAI).

All scanning is read-only. No destructive payloads, no state changes. Authenticated scanning requires verified domain ownership via DNS or HTTP, so only API owners can scan with credentials.

Available as a web dashboard, CLI, GitHub Action for CI/CD gates, and MCP Server. Compliance reporting for GDPR, PCI-DSS, HIPAA, SOC 2, ISO 27001, and NIST.

Free tier includes 3 scans per month. Paid plans start at $99/mo.