flipkart-incubator/Astra

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

2658 stars · 413 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Astra is an automated REST API security testing tool from Flipkart that detects vulnerabilities like SQL injection, XSS, broken authentication, JWT attacks, CSRF, and SSRF. It accepts Postman or Swagger collections as input, offers both CLI and web dashboard modes, and integrates into CI/CD pipelines.

Use cases

• automated penetration testing of REST APIs
• scan Postman collection for security vulnerabilities
• integrate API security testing into CI/CD pipeline
• detect SQL injection and XSS in API endpoints
• test JWT and authentication flaws in APIs
• find CORS misconfigurations and rate limiting issues
• run API security scans from Swagger definitions

When to choose

• you need automated REST API vulnerability scanning in Python
• you want to shift API security testing left in the SDLC
• you already have Postman or Swagger collections to scan
• you need both CLI and dashboard interfaces for API pentesting

When to avoid

• you need to test GraphQL or SOAP APIs
• you require a maintained tool with recent updates and Python 3.10+ support
• you need GUI-driven manual penetration testing rather than automated scanning
• you need Windows support natively without Docker

Facets

cli-tool · maturity maintenance

penetration-testing security vulnerability-scanning testing ci-cd security penetration-testing apis developer-tools python cli rest-api-security postman-collection swagger owasp security-automation sdlc api-scanning dashboard automation linux macos docker web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="flipkart-incubator/Astra")