API-penetration testing scanners are usually website-related APIs. beSTORM is a generic API testing application that includes but is not limited to web APIs. It supports:
- SOAP
- JSON
- OpenAPI
- RMI
- RPC API
beSTORM allows users to run more tests and evaluate the vulnerability of many different API structures.