CheckVibeCodeCheckVibeCode
Checks/Vulnerability
VulnerabilityLive4 checks

GraphQL Security Scanner

Audit your GraphQL API for introspection leaks, injection, and query complexity attacks.

Run this scanSee pricing

How this scan works

  • Probe common endpoints (/graphql, /api/graphql, /v1/graphql)
  • Send a standard introspection query and flag if it's enabled in production
  • Check for batched-query support — an amplification risk — without sending an amplifying payload
  • Check for a query-depth/complexity limit signal via a deliberately shallow nested query's response
  • Check CORS and auth requirements on the endpoint itself

More checks in Vulnerability

SQL Injection ScannerCross-Site Scripting (XSS) ScannerAPI Key Exposure ScannerCORS Misconfiguration ScannerCSRF Protection ScannerAuthentication Flow Scanner