Escape
GraphQL-native DAST and AI pentesting for business-logic API vulnerabilities.
About
Escape is a GraphQL-native DAST and AI pentesting platform built for business-logic testing at enterprise scale. Its proprietary engine generates context-aware attack payloads directly from OpenAPI schemas or GraphQL schemas, catching field-level authorization bypasses, nested BOLAs, and IDORs that REST-first scanners miss, with every finding shipped alongside a proof of exploit and framework-specific fix.
The platform adds AI-powered authentication handling for OAuth 2.0, JWT rotation, and MFA, plus AI-assisted crawling for wider coverage, and integrates natively with GitHub, GitLab, and Jenkins so scans gate every build. Reviewer coverage rates it 4.8 out of 5 on G2 (reviewer-reported).
What it can do
- GraphQL-native DAST with business-logic flaw detection
- AI-powered authentication handling and AI-assisted crawling
- Proof-of-exploit findings with framework-specific fixes
- Native CI/CD gating for GitHub, GitLab, and Jenkins
Setup
Sign up on escape.tech and connect your API schema or let agentless discovery find endpoints.
Prerequisites
REST or GraphQL APIs to scan; CI provider for pipeline integration.
Use cases
Works with
Trust score — 8/10
Scored 8/10 (verified tier, metrics-v1). Evidence: Verified via vendor site/docs/GitHub and reputable coverage, wave 121; Trending score 76/100 from researcher assessment.
Sources
Every fact above was checked against these sources. Where a claim comes from the provider and couldn't be independently verified, the text says so.