Welcome

Welcome to NAT

NAT (Neural Autonomous Tester) is an AI-powered API security testing platform. It autonomously discovers vulnerabilities in your REST and GraphQL APIs — going beyond traditional scanners by using intelligent agents that adapt to your application's behavior in real time.

What is NAT?

NAT combines multi-agent AI with deep API understanding to deliver security testing that is:

  • Autonomous — NAT runs scans end-to-end without manual configuration for each endpoint
  • Intelligent — Adaptive agents prioritize high-risk endpoints and re-test based on new findings
  • Comprehensive — Covers OWASP API Top 10, auth flaws, injection attacks, business logic issues, and more
  • Integrable — Works inside CI/CD pipelines, Docker environments, and on-demand via CLI or REST API

Quick navigation

Key capabilities

CapabilityDescription
REST API TestingFull OWASP API Top 10 coverage with intelligent fuzzing
GraphQL TestingSchema introspection, query injection, auth bypass detection
CI/CD IntegrationNative GitHub Actions support, zero-config pipeline mode
Self-HostedDeploy on your own infrastructure — no data leaves your network
DashboardReal-time scan results, risk scoring, and remediation guidance
Demo ModeSafe, risk-free exploration of all features against a built-in target API

How it works

NAT deploys a team of specialized AI agents that coordinate to:

  1. Discover — Map all endpoints, parameters, and authentication flows in your API
  2. Prioritize — Score endpoints by risk and focus effort on the highest-value targets
  3. Test — Generate and execute intelligent test cases covering known and novel attack vectors
  4. Learn — Adapt strategy based on responses, chaining discoveries into deeper exploit paths
  5. Report — Produce actionable, developer-friendly reports with severity ratings and fix guidance

Get started

The fastest way to try NAT is demo mode — a fully sandboxed environment that runs against a built-in example API with no external dependencies:

pip install nat-engine
nat demo

See the Demo Mode guide for a full walkthrough, or jump straight to Installation to set up against your own API.


Need help? See Troubleshooting or the FAQ.