VAPI
Vulnerable API Web App — an intentionally-broken sandbox for practicing API security testing.
- Full OWASP API Security Top 10 coverage
- Low / Medium / High difficulty per module
- Built-in Burp Suite walkthroughs
- Persistent accounts & admin user management
v1.4 · deploy target: Cloudflare Workers