glimow

8 ms·

1.
by glimow 3y ago
Sure, we count Developers who committed to the API repository in the last three months. Hope that makes it more clear!
2.
by glimow 3y ago
Sure, Escape and Akita are quite different: 1) Escape is primarily for Security Engineers, Akita is more for developers 2) Escape discovers API with external scans, Akita discovers API by observing live traffic 3) Escape is a proactive secu
3.
by glimow 3y ago
We created specific safeguards for production mode; for instance, Escape doesn't launch any DELETE requests in prod mode. You can also manually configure an allowlist/blocklist of operations for specific use cases.
4.
by glimow 3y ago
Hey there, so py-multiauth is a great project that we love, but it didn't get enough attention from the community for us to afford to maintain it outside of our main codebase. Since then, we have completely revamped it to create py-mul
5.
by glimow 3y ago
Thank you! Hope you will like it
6.
by glimow 3y ago
Thank you for the positive vibes. We try to make our product as straightforward as possible. It’s a long journey for such technical topic but it gets better everyday. And we listen to feedback. I’ll take a look at Azure Marketplace.
7.
by glimow 3y ago
The « Launch HN » posts, like this one, follow quite standard community guidelines that includes having a detailed description of how the product works to bring value to technical people from the HN community. Of course, for investors, we w
8.
by glimow 3y ago
Hello, although we know HN's rules, some of our users don't. They just tried to help without telling us. I guess we can be proud that they are our users and wanted to help. There was no intent to break HN's rules. We apologiz
9.
by glimow 3y ago
Hello motoxpro, the pricing page is accessible inside the product during the free trial. Although, by nature, the security market is mostly enterprise, we do have plans for startups and SMB as well. Happy to have your feedback on our pricin
10.
by glimow 3y ago
Hello btown, you are indeed raising legitimate questions here. You are right in the sense that using automated security testing tools in production creates a risk. But there are workarounds: 1) Most of Escape's security scans happen on
11.
by glimow 3y ago
Thank you, yes, we originally supported GraphQL only and released REST scanning support a few months ago. We plan to support all types of APIs ultimately.
12.
by glimow 3y ago
Hello, we limited the registration to personal email because too many people were trying to scan APIs that didn't belong to them. Mind you that you can also use your personal GitHub account to register because we noticed people are way
13.
Launch HN: Escape (YC W23) – Discover and secure all your APIs
96 points by glimow 3y ago|34 comments
14.
by glimow 4y ago
I agree that there is a lot of room for improvement. We are a small team and we had to start somewhere to have feedback from the community and improve accordingly :) Thanks for the great ideas, I share your opinion on those
15.
by glimow 4y ago
This is on the way!
16.
by glimow 4y ago
This is an experimental research we did mostly because we thought it was cool and new. There are limitations indeed, though if you compare similar APIs with similar business intent, their structure should also have similarity, unlike your e
17.
by glimow 4y ago
All hail the holy API :))
18.
by glimow 4y ago
I agree with your point, yet we thought the data we gathered could be interesting, for instance we observe that ~60% of routes have human readable comments, but less than 10% have actual examples.
19.
by glimow 4y ago
We used Algolia free tier for the search but all the credits were consumed :') I take this as a learning for our next side project
20.
by glimow 4y ago
We use Algolia free tier for the search, perhaps we have reached the limit :')
21.
by glimow 4y ago
Author here. Love your ideas! I've thought about tagging - I'd even love to have automated tagging of APIs from routes names etc.. but I'm super excited about sorting and comparison features This is kind of a side project for
22.
Show HN: APIRank.dev – We crawled and ranked public APIs from the internet(apirank.dev)
176 points by glimow 4y ago|60 comments
23.
Show HN: Openapi.security, a fast security checker for REST-based API(openapi.security)
15 points by glimow 4y ago|18 comments
24.
Show HN: GraphQL Armor – An open source security layer for GraphQL(github.com)
3 points by glimow 4y ago|0 comments
25.
Show HN: GraphQL Armor – A middleware to make GraphQL more secure than REST(github.com)
4 points by glimow 4y ago|0 comments
26.
Show HN: Graphman – Quickly scaffold a postman collection for any GraphQL API(github.com)
10 points by glimow 4y ago|0 comments
27.
by glimow 4y ago
Pricing page is on the way! Should be up on our website this week
28.
by glimow 4y ago
Not directly, but it will work through a proxy like ngrok