API-penetration testing scanners are usually website-related APIs. beSTORM is a generic API testing application that includes but is not limited to web APIs. It supports:

  • SOAP
  • JSON
  • OpenAPI
  • RMI
  • RPC API 

beSTORM allows users to run more tests and evaluate the vulnerability of many different API structures.