Ross ROSS = Recommend OSS · open-source software intelligence for agents

doyensec/inql

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration. observed · 2026-08-28

github.com/doyensec/inql · homepage · Kotlin · Apache-2.0 (permissive) observed · 2026-08-28

Health v2 · maintenance only

76/100

  • Activity 88
  • Release rhythm 47
  • Longevity 100
How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-02. Adoption (stars, forks) is never an input.

  • gap_med: 156.5
  • age_days: 3057
  • days_rel: 198
  • days_push: 77
  • n_releases_24m: 3

Full methodology

Adoption not part of the score

1801 stars · 187 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

InQL is an open-source Burp Suite extension for advanced GraphQL security testing. It provides schema introspection, vulnerability detection, and customizable scans integrated into Burp.

Use cases

  • test graphql endpoints for security vulnerabilities
  • introspect graphql schemas during pentests
  • scan graphql apis in burp suite
  • find graphql injection vulnerabilities
  • bug bounty recon on graphql apis

When to avoid

  • you need a standalone scanner without burp suite
  • you want general-purpose non-graphql api security testing

Facets

plugin · maturity active

security penetration-testing graphql api-framework security penetration-testing apis web-development editor-plugin cross-platform jvm burpsuite graphql-security bugbounty vulnerability-scanning

2 sources

Member repositories

RepositoryRoleHealth v2
doyensec/inqlmain76

For agents

markdown · JSON · MCP: product_card(name="doyensec/inql")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem