Which tool is used to detect and exploit REST API vulnerabilities and can be integrated into CI/CD?

• A. Nmap
• B. Burp Suite
• C. Metasploit
• D. Astra

Answer: (D)

Continuous security for REST APIs in a CI/CD workflow relies on a tool that specifically targets API risks and can plug into pipelines. Astra specializes in API security testing, including REST endpoints, and offers CI/CD integrations so API checks run automatically during builds and deployments. This lets you catch vulnerabilities early and enforce security gates as part of normal development, not as a separate step. Other tools focus on different areas or lack native CI/CD integration for automated API testing: Nmap is a network scanner, Burp Suite is strong for interactive web app testing but isn’t as seamless for automated API security in pipelines, and Metasploit is an exploitation framework rather than a CI/CD–friendly API vulnerability scanner.