Assertwise Lab / OpenAPI
OpenAPIOpenAPI validator & linter with OWASP API Top 10 hints
Runs entirely in your browser – nothing you paste or upload is sent to our server.
RUNS IN YOUR BROWSER
What is checked
Required fields (openapi, info, paths), version, unresolved local $refs, path parameters vs. templates, duplicate operationIds, responses and descriptions; documentation quality (summaries, descriptions, examples); consistent path and parameter naming; and security design: security schemes, unauthenticated operations, missing 401/403/404 for object-level endpoints (API1 BOLA), missing 429 and pagination limits (API4), mass assignment and sensitive properties in responses (API3), plain-HTTP servers (API8).
Want a senior engineer to look at the results?
Free tools give you a first signal. In a free 20-minute check-up we review your API, performance or test setup and tell you what to fix first.