Api-Security

SpecRecon (SpecQL + …

SpecQL-APISpy (SpecRecon) combines two complementary capabilities: static API specification analysis and runtime request inspection. What it does Uses SpeQL to analyze Azure REST specifications for risky patterns Uses APISpy to classify live Azure and Microsoft API calls in-browser Maps potential …

UndREST-SpecQL

UndREST-SpecQL is the static-analysis backbone of the UndREST toolchain. It queries and inspects Azure REST specifications to expose high-value behavioral and security signals. What it does Scans Azure REST specs with CodeQL and built-in analyzers Builds structured operation indexes consumed by …

UndREST-APISpy

UndREST-APISpy is a DevTools extension that observes live API traffic and classifies requests against the SpeQL inventory model. What it does Captures Azure and Microsoft API calls during interactive workflows Labels requests with provider and operation context Uses prebuilt provider shards …