Test API endpoints for common security weaknesses: broken auth, excessive data exposure, rate limit gaps and misconfigured CORS. Free online tool.