Welcome to NAT
NAT (Neural Autonomous Tester) is an AI-powered API security testing platform. It autonomously discovers vulnerabilities in your REST and GraphQL APIs — going beyond traditional scanners by using intelligent agents that adapt to your application's behavior in real time.
What is NAT?
NAT combines multi-agent AI with deep API understanding to deliver security testing that is:
- Autonomous — NAT runs scans end-to-end without manual configuration for each endpoint
- Intelligent — Adaptive agents prioritize high-risk endpoints and re-test based on new findings
- Comprehensive — Covers OWASP API Top 10, auth flaws, injection attacks, business logic issues, and more
- Integrable — Works inside CI/CD pipelines, Docker environments, and on-demand via CLI or REST API
Quick navigation
Key capabilities
| Capability | Description |
|---|---|
| REST API Testing | Full OWASP API Top 10 coverage with intelligent fuzzing |
| GraphQL Testing | Schema introspection, query injection, auth bypass detection |
| CI/CD Integration | Native GitHub Actions support, zero-config pipeline mode |
| Self-Hosted | Deploy on your own infrastructure — no data leaves your network |
| Dashboard | Real-time scan results, risk scoring, and remediation guidance |
| Demo Mode | Safe, risk-free exploration of all features against a built-in target API |
How it works
NAT deploys a team of specialized AI agents that coordinate to:
- Discover — Map all endpoints, parameters, and authentication flows in your API
- Prioritize — Score endpoints by risk and focus effort on the highest-value targets
- Test — Generate and execute intelligent test cases covering known and novel attack vectors
- Learn — Adapt strategy based on responses, chaining discoveries into deeper exploit paths
- Report — Produce actionable, developer-friendly reports with severity ratings and fix guidance
Get started
The fastest way to try NAT is demo mode — a fully sandboxed environment that runs against a built-in example API with no external dependencies:
pip install nat-engine
nat demoSee the Demo Mode guide for a full walkthrough, or jump straight to Installation to set up against your own API.
Need help? See Troubleshooting or the FAQ.