42Crunch API Security Platform

Plans and prices

Every plan, in full

On the record

API formats

The platform supports OpenAPI 2, 3.0 and 3.1 definitions in JSON or YAML.docs.42crunch.com · read 14 Oct 2026

API testing

Its API security testing uses static and dynamic tests generated from OpenAPI definitions and maps findings to the OWASP API Security Top 10.42crunch.com · read 30 Sep 2026

Audit coverage

The audit checks more than 200 contract structure, semantics, security and data-definition conditions.docs.42crunch.com · read 14 Oct 2026

CI/CD quality gates

Audit and Scan can run as Security Quality Gates that fail a pipeline when an API is non-conforming.42crunch.com · read 14 Oct 2026

CI/CD support

The platform's CI/CD documentation lists Azure Pipelines, Bamboo, Bitbucket Pipelines, GitHub Actions, GitLab Pipelines, Jenkins, Tekton, and a generic Docker image for REST API static security testing.docs.42crunch.com · read 30 Sep 2026

Company

The current website identifies the company as 42Crunch Ltd. and its leadership page names Jacques Declas and Philippe Leothaud as co-founders.42crunch.com · read 30 Sep 2026

Company founding and headquarters

LinkedIn lists the company as founded in 2016 and headquartered in Dublin.linkedin.com · read 14 Oct 2026

Company size

LinkedIn lists 42Crunch as a privately held company with 51–200 employees.linkedin.com · read 14 Oct 2026

Compliance

The platform maps MCP security findings to NIST AI RMF, OWASP MCP Top 10, EU AI Act, ISO/IEC 42001, and CSA AICM controls.42crunch.com · read 30 Sep 2026

Component licences

GitHub lists the vscode-openapi and scan-manager repositories under AGPL-3.0 and the API security audit action under Apache-2.0.github.com · read 14 Oct 2026

Deployment

Enterprise deployment options listed by the maker are cloud, on-premises, and hybrid.42crunch.com · read 30 Sep 2026

Documentation

The documentation site covers audit, scan, protection, integrations, tasks, concepts, support material and release notes.docs.42crunch.com · read 14 Oct 2026

Dynamic scan

API Scan generates traffic against a live endpoint to test implementation conformance and security.docs.42crunch.com · read 14 Oct 2026

Editor capabilities

The editor provides IntelliSense, linting, navigation, schema enforcement, SwaggerUI or ReDoc preview, snippets and Try-it execution.marketplace.visualstudio.com · read 14 Oct 2026

Funding and ownership

Crunchbase describes 42Crunch as private, Series A, headquartered in London, with Adara Ventures and Energy Impact Partners among its investors.crunchbase.com · read 14 Oct 2026

GraphQL support

GraphQL schema files are supported, but introspection files are not and GraphQL requires a separate subscription.docs.42crunch.com · read 14 Oct 2026

IDE support

The free OpenAPI editor supports VS Code, IntelliJ-based IDEs and Eclipse, with Visual Studio Enterprise support added in 2026.docs.42crunch.com · read 14 Oct 2026

Independent pricing criticism

FAUN.dev scored pricing transparency low and said team or enterprise use requires a sales-sized subscription.faun.dev · read 14 Oct 2026

Alternatives to 42Crunch API Security Platform

A APIPostureWindowsMac+2 OS Onam Security API SecurityWebWindows+4 AP APISec PlatformWebLinux+3 DA DataDome API ProtectionAndroidiPhone & iPad+2 H HaltdosWebLinux+2 AA apPosture API SecurityWebLinux+2 CP Cisco PanopticaWebLinux+2 WA Wallarm API SecurityWebLinux+2

Every alternative, ranked