Skip to content

GrantTrace v2.3.1

Choose a tag to compare

View all tags
@ysc070528 ysc070528 released this 02 Oct 07:26
· 91 commits to main since this release
v2.3.1
f87b161
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

GrantTrace v2.3.1

First public release of GrantTrace.

GrantTrace is an evidence-driven API authorization security auditing tool focused on:

  • BOLA / IDOR testing
  • Mass Assignment testing
  • OpenAPI / Swagger parsing
  • Read-only auditing by default
  • Controlled write testing with explicit allowlists
  • JSON and HTML audit reports
  • Offline configuration validation

Highlights

  • Safety-first design with read-only behavior by default
  • OpenAPI 3.x and Swagger 2.0 support
  • Evidence-based authorization findings
  • Configuration schema validation
  • 223 automated regression and security-hardening tests
  • Apache License 2.0

Version

v2.3.1

Assets 3
Loading