Free public checks, with clear limitsMeasured results and stated limitsSecurity · WCAG · SEO · Performance
CATEGORY 17 / 59

GraphQL, WebSocket et SSE

10 checks in the reference catalogue. Each row appears under this category in AxiSecurity campaigns and full reports.

Badge guide: Free = passive diagnostic or public signal; Paid = bounded or authenticated automated/technical check; Expert = internal evidence, human audit, controlled load or mandate-based penetration testing.
C17-T001
source 7
GraphQL introspection
Authorisation: verified_safe
View tutorial →
Paid
demo · preproduction · production
Controlled automatic
Engine, evidence or review depending on scope
C17-T002
source 7
GraphQL profondeur requêtes
Authorisation: verified_safe
View tutorial →
Paid
demo · preproduction · production
Controlled automatic
Engine, evidence or review depending on scope
C17-T003
source 7
GraphQL complexité
Authorisation: verified_safe
View tutorial →
Paid
demo · preproduction · production
Controlled automatic
Engine, evidence or review depending on scope
C17-T004
source 7
GraphQL batching abuse
Authorisation: verified_safe
View tutorial →
Paid
demo · preproduction · production
Controlled automatic
Engine, evidence or review depending on scope
C17-T005
source 7
Autorisation GraphQL
Authorisation: verified_safe
View tutorial →
Paid
demo · preproduction · production
Controlled automatic
Engine, evidence or review depending on scope
C17-T006
source 7
WebSocket authentification
Authorisation: verified_safe
View tutorial →
Paid
demo · preproduction · production
Controlled automatic
Engine, evidence or review depending on scope
C17-T007
source 7
WebSocket autorisation
Authorisation: verified_safe
View tutorial →
Paid
demo · preproduction · production
Controlled automatic
Engine, evidence or review depending on scope
C17-T008
source 7
Injection messages WebSocket
Authorisation: verified_safe
View tutorial →
Paid
demo · preproduction · production
Controlled automatic
Engine, evidence or review depending on scope
C17-T009
source 7
Cross-Site WebSocket Hijacking
Authorisation: deep_active · Controlled intrusive test
View tutorial →
Expert
demo · preproduction · production
Human expert
Engine, evidence or review depending on scope
C17-T010
source 7
SSE authentification
Authorisation: verified_safe
View tutorial →
Paid
demo · preproduction · production
Controlled automatic
Engine, evidence or review depending on scope