Freedom251 › API Security Testing Software

Operator

Free plan Web

What Operator is

Operator is an autonomous API penetration testing agent that reads an OpenAPI or Swagger specification and tests the documented operations. It covers REST, GraphQL, and gRPC APIs, as well as agents and RAG systems behind them. Testing can address BOLA, BFLA, broken authentication, injection, and related authorization weaknesses across roles and tenants. Customers provide a verified domain, API base URL, specification, and a bearer token for each user role. Each finding includes the exact requests and responses, reproduction steps, a CVSS v3.1 vector, and remediation guidance. Findings can be sent to GitHub, GitLab, Slack, Jira, ServiceNow, CI/CD pipelines, SIEM systems, webhooks, or a documented API. Operator tests only operations described in the supplied specification; it does not perform blind fuzzing. Engagement data is encrypted in transit and at rest, access is restricted to the assigned team, and retention and destruction schedules are defined per engagement. Client data, findings, and reports are not used to train models or build datasets. A free plan is available; paid plans are quoted.

Who it suits

Operator suits teams that need API security testing across documented operations, roles, or tenants. Enterprise options include private deployment, SSO/SAML, roles, SLAs, and dedicated support.

What it does well

Covers REST, GraphQL, and gRPC APIs.
Reports include reproducible requests, responses, and remediation guidance.
Routes findings to development and operations tools.
Free plan available.
Engagement data has defined access and retention controls.

What to know first

Tests only operations in the supplied specification.
Does not perform blind fuzzing.
Paid plan prices are quoted, not listed.
Pro includes four scans monthly; extra scans cost more.

Limits

The free First Scan includes one complete self-serve penetration test for one domain. The Annual Assessment covers one scheduled test per year, while Pro includes four scans per month and charges more for extra scans.

Plans

Plan	Billed and limits	Price
First Scan	one complete agentic penetration test · one domain · self-serve	On request
Annual Assessment	Quoted · one scheduled penetration test per year · not continuous scanning	On request
Pro	Quoted · 4 scans per month included · extra scans cost more · endpoint-volume pricing	On request
Enterprise	Custom · SSO/SAML and roles · private VPC or on-prem deployment · SLA and dedicated support	On request

As planckproof.ai lists them, read 30 Sept 2026. The maker's own page has the final word.

Getting started

Visit the Planck Proof website.
Choose the First Scan or discuss a quoted plan.
Provide a verified domain and API base URL.
Supply an OpenAPI or Swagger specification and a bearer token for each user role.
Choose where findings should be routed.

Verdict

Operator combines documented-operation testing with detailed proof and remediation guidance. Its scope limit and quoted pricing are important to consider when assessing fit.

Questions

Is Operator free?

Yes. The First Scan is a free plan covering one complete self-serve penetration test for one domain.

What does Operator test?

It tests documented operations in an OpenAPI or Swagger specification across roles and tenants. Coverage includes REST, GraphQL, and gRPC APIs, plus agents and RAG systems behind them.

What information is needed to run a test?

Customers provide a verified domain, API base URL, OpenAPI or Swagger specification, and one bearer token per user role.

Which plans are available?

Options are First Scan, Annual Assessment, Pro, and Enterprise. Paid plans are quoted; Pro includes four scans per month, and Enterprise includes SSO/SAML and roles, private VPC or on-premises deployment, an SLA, and dedicated support.

Where can findings be sent?

Findings can go to GitHub, GitLab, Slack, Jira, ServiceNow, CI/CD pipelines, SIEM systems, webhooks, or the documented API.

How is engagement data handled?

Engagement data is encrypted in transit and at rest, and access is limited to the assigned team. Client data, findings, and reports are not used to train models, tune tooling, or build datasets.

Facts from Operator's own pages

API coverage: Coverage includes REST, GraphQL, and gRPC APIs, plus agents and RAG systems behind them. · planckproof.ai, 30 Sept 2026
Data use: Client data, findings, and reports are never used to train models, tune tooling, or build datasets. · planckproof.ai, 30 Sept 2026
Delivery model: Operator is delivered as a managed capability with a defined scope and fixed quoted price. · planckproof.ai, 30 Sept 2026
Enterprise deployment: Enterprise availability includes SSO/SAML, roles, private VPC or on-premises deployment, SLAs, and dedicated support. · planckproof.ai, 30 Sept 2026
Finding proof: Every reported finding includes exact requests and responses, reproduction steps, a CVSS v3.1 vector, and remediation guidance. · planckproof.ai, 30 Sept 2026
How it works: It parses an OpenAPI or Swagger specification, enumerates documented operations, and tests them autonomously. · planckproof.ai, 30 Sept 2026
Integrations: Findings can be routed to GitHub, GitLab, Slack, Jira, ServiceNow, CI/CD pipelines, SIEM systems, webhooks, and a documented API. · planckproof.ai, 30 Sept 2026
Required inputs: Customers provide a verified domain, API base URL, OpenAPI or Swagger specification, and one bearer token per user role. · planckproof.ai, 30 Sept 2026
Scope limit: Operator tests only documented operations included in the supplied specification and does not perform blind fuzzing. · planckproof.ai, 30 Sept 2026
Security controls: Engagement data is encrypted in transit and at rest, access is limited to the assigned team, and retention and destruction schedules are defined per engagement. · planckproof.ai, 30 Sept 2026
Support: The Pro plan includes 24/7 support for scan-related questions and issues. · planckproof.ai, 30 Sept 2026
Target customers: Planck Proof works with finance, healthcare, SaaS, energy, manufacturing, and government contracting organizations. · planckproof.ai, 30 Sept 2026
Vulnerability coverage: It tests for BOLA, BFLA, broken authentication, injection, and related authorization weaknesses across roles and tenants. · planckproof.ai, 30 Sept 2026
What it does: Operator is an autonomous, agentic API penetration testing agent. · planckproof.ai, 30 Sept 2026

Where Operator stands on Freedom251

API Security Testing Software#15 of 27