Overview
Escape is an API security testing platform that automatically discovers and tests REST, GraphQL, and gRPC APIs for security vulnerabilities. The Pwnbook integration pulls Escape scan results into your unified findings view so API security issues are tracked alongside code, cloud, and endpoint findings.Prerequisites
- An Escape account
- Admin or Owner access in Pwnbook
Credentials required
Setup
1
Get your Escape API key
- In the Escape dashboard, go to Settings → API Keys.
- Click Create API key.
- Give it a name like “Pwnbook” and copy the key.
2
Configure in Pwnbook
- Go to Organization Settings → Marketplace → Escape.
- Paste your API Key.
- Click Save & Test — Pwnbook verifies access by listing your Escape applications.
What gets synced
Issue categories
Escape covers a broad range of API security issues, including:- Authentication and authorization flaws
- Injection vulnerabilities (SQLi, NoSQLi, command injection)
- Excessive data exposure
- Rate limiting and resource exhaustion
- Security misconfigurations
- GraphQL-specific issues (introspection, batch attacks, deep queries)
Viewing findings in Pwnbook
Escape findings appear under Security Findings → Escape. You can:- Filter by severity and endpoint
- View request/response pairs showing the vulnerability
- Copy remediation steps directly from the finding detail
- Assign findings to tasks
Disconnecting
- Go to Organization Settings → Marketplace → Escape.
- Click Disconnect.
- Confirm.