{"id":17526,"date":"2023-11-15T17:29:09","date_gmt":"2023-11-15T17:29:09","guid":{"rendered":"https:\/\/staging2022.42crunch.com\/?page_id=17526"},"modified":"2024-04-05T14:52:00","modified_gmt":"2024-04-05T13:52:00","slug":"free-user-faq","status":"publish","type":"page","link":"https:\/\/staging2022.42crunch.com\/free-user-faq\/","title":{"rendered":"Free User FAQ"},"content":{"rendered":"\n\n\t\t<h1>\n\t\t\tFreemium User FAQ\n\t\t\t\t\t\tHelping you fix Your APIs today and prevent API breaches tomorrow\n\t\t<\/h1>\n\t<p>This FAQ page addresses the most commonly asked questions by freemium users of our API Security Testing services. If you don&#8217;t find the answer to your questions below, <a href=\"https:\/\/staging2022.42crunch.com\/contact-us\/\" target=\"_blank\" rel=\"noopener\">please contact<\/a> us or log a ticket on <a href=\"https:\/\/support.42crunch.com\" target=\"_blank\" rel=\"noopener\">our support desk<\/a> and we&#8217;ll do our best to answer your question.<\/p>\n<p>We have arranged the questions into 4 groups<\/p>\n<ol>\n<li><a href=\"#Freemium\">Freemium User FAQs<\/a><\/li>\n<li><a href=\"#API-security-testing-heading\">Free API Security Testing FAQs<\/a><\/li>\n<li><a href=\"#Additional-questions\">Additional FAQs<\/a><\/li>\n<li><a href=\"#Subscription-Upgrade\">Subscription Upgrade FAQs<\/a><\/li>\n<\/ol>\n\t\t<h2>\n\t\t\tFreemium\n\t\t\t\t\t\t\t\t\t\t\tFAQs\n\t\t<\/h2>\n\t\t\t<p>Freemium allows users to use our API security testing solutions for free with limited monthly usage once it is for non-commercial \/ non-production use.<\/p>\t\t\n\t\t\t\t\t\t<h5>What is included in the Freemium Offering?<\/h5>\n\t\t\t<p>Both our <a href=\"https:\/\/staging2022.42crunch.com\/api-security-audit\/\" target=\"_blank\" rel=\"noopener\">API Audit<\/a> and <a href=\"https:\/\/staging2022.42crunch.com\/api-conformance-scan\/\" target=\"_blank\" rel=\"noopener\">API Scan<\/a> services are available for free, with usage restrictions, in your IDE and CI\/CD pipelines. The freemium version is designed solely for non-production use. You get 25 full security audits and scans per month in CI\/CD and IDE, by full we mean the complete OpenAPI definition is audited \/ scanned. You also get 100 API operation audits and scans per month in the IDE only. An &#8220;operation&#8221; audit or scan is where a single operation within the OpenAPI definition can be checked for security weakness.<\/p>\n\t\t\t\t\t\t<h5>What level of support do I get with Freemium?<\/h5>\n\t\t\t<p>With freemium we provide these FAQs and self-serve <a href=\"https:\/\/staging2022.42crunch.com\/tutorials\/\">tutorial videos<\/a>. You can also register your query in <a href=\"https:\/\/support.42crunch.com\" target=\"_blank\" rel=\"noopener\">our support section<\/a> and we will do our best to respond within a reasonable time. <\/p>\n\t\t\t\t\t\t<h5>Can I collaborate with other people on the same API?<\/h5>\n\t\t\t<p>On the free service you cannot collaborate with other users working on the same API, this is available only to <a href=\"https:\/\/staging2022.42crunch.com\/teams-pricing\/\">paid subscribers<\/a>.<\/p>\n\t\t\t\t\t\t<h5>What happens when I reach my limit for the month?<\/h5>\n\t\t\t<p>You have a few options:<\/p>\n<ul>\n<li aria-level=\"1\">Upgrade your account with 42Crunch &#8211; <a href=\"https:\/\/staging2022.42crunch.com\/pricing\/\" target=\"_blank\" rel=\"noopener\">see pricing<\/a>. For reasons why you should upgrade, <a href=\"#Subscription-Upgrade\">see the upgrade section.<\/a><\/li>\n<li aria-level=\"1\">Conduct a <a href=\"https:\/\/staging2022.42crunch.com\/request-enterprise-free-trial\/\">free enterprise trial<\/a>\u00a0 &#8211; time limited.<\/li>\n<li aria-level=\"1\"><a href=\"https:\/\/staging2022.42crunch.com\/introductory-call\/\">Contact us<\/a> to learn more about our API Security testing and API Runtime protection services.\u00a0<\/li>\n<li aria-level=\"1\">Continue as you are, but wait until the end of the time period for the free 30 day allowance to restart.<\/li>\n<\/ul>\n\t\t<h2>\n\t\t\tAPI Security Testing\n\t\t\t\t\t\t\t\t\t\t\tFAQs\n\t\t<\/h2>\n\t\t\t<p>Below are questions specifically related to using our API security tools as a freemium user. \u00a0Additional &#8220;how to&#8221; videos can be found in our <a href=\"https:\/\/staging2022.42crunch.com\/tutorials\/\">tutorial videos<\/a> section.<\/p>\t\t\n\t\t\t\t\t\t<h5>What is API Security Audit?<\/h5>\n\t\t\t<p><a href=\"https:\/\/staging2022.42crunch.com\/api-security-audit\/\" target=\"_blank\" rel=\"noopener\">API Audit<\/a>\u00a0is a 42Crunch static API testing service that helps users find and fix issues with their OpenAPI contracts during the design time and avoid releasing unprotected APIs.<\/p>\n<p>API Audit performs over 300+ checks on the OpenAPI Contract checking for adherence to the OpenAPI specification, data definition quality (how well your schema is defined) and potential security vulnerabilities.<\/p>\n<p><div class=\"ast-oembed-container \" style=\"height: 100%;\"><iframe loading=\"lazy\" src=\"https:\/\/player.vimeo.com\/video\/873235173?dnt=1&amp;app_id=122963\" width=\"500\" height=\"313\" frameborder=\"0\" allow=\"autoplay; fullscreen; picture-in-picture; clipboard-write\"><\/iframe><\/div><\/p>\n\t\t\t\t\t\t<h5>Where can I run the API Security Audit from?<\/h5>\n\t\t\t<p>API Audit is available from a number of <a href=\"https:\/\/staging2022.42crunch.com\/ide-api-integrations\/\">IDE<\/a> marketplaces (via the openAPI Editor) and <a href=\"https:\/\/staging2022.42crunch.com\/cicd-api-integrations\/\">CI\/CD platforms<\/a> (as a plugin).\u00a0 It is available either for free with limited usage or on the 42Crunch platform as a paid subscription.<\/p>\n\t\t\t\t\t\t<h5>How do I run the API Audit from the IDE?<\/h5>\n\t\t\t<p>You can run the audit from the 42Crunch OpenAPI editor in VS Code, IntelliJ and Eclipse.\u00a0<\/p>\n<p>First you need to activate the service. Here is a short video to explain.<\/p>\n<p><div class=\"ast-oembed-container \" style=\"height: 100%;\"><iframe loading=\"lazy\" title=\"Activate OpenAPI Audit in the IDE\" src=\"https:\/\/player.vimeo.com\/video\/873205401?h=a8408b4464&amp;dnt=1&amp;app_id=122963\" width=\"500\" height=\"313\" frameborder=\"0\" allow=\"autoplay; fullscreen; picture-in-picture; clipboard-write\"><\/iframe><\/div><\/p>\n<p>Once the Audit service is active you can take a look at the <a href=\"https:\/\/staging2022.42crunch.com\/tutorial-api-security-audit-report\/\" target=\"_blank\" rel=\"noopener\">tutorial video page<\/a> on how to run the API Security Audit.<\/p>\n\t\t\t\t\t\t<h5>How do I run the API Audit from CI\/CD?<\/h5>\n\t\t\t<p>You can run the audit for freemium users from GitHub Actions. We will be expanding to Azure DevOps and other CI\/CD platforms in the coming months.\u00a0<\/p>\n<p>Please take a look at a tutorial video on how to run the API Security Audit &amp; API Scan for freemium users from GitHub.<\/p>\n<p><div class=\"ast-oembed-container \" style=\"height: 100%;\"><iframe loading=\"lazy\" title=\"Freemium Tutorial\" src=\"https:\/\/player.vimeo.com\/video\/884851346?h=8afde3bb4a&amp;dnt=1&amp;app_id=122963\" width=\"500\" height=\"313\" frameborder=\"0\" allow=\"autoplay; fullscreen; picture-in-picture; clipboard-write\"><\/iframe><\/div><\/p>\n\t\t\t\t\t\t<h5>What is API Conformance Scan?<\/h5>\n\t\t\t<p><a href=\"https:\/\/staging2022.42crunch.com\/api-conformance-scan\/\">API Scan<\/a> is a dynamic API Security Testing tool for REST API. This means that API Scan sends real API traffic to your API and examines and validates the responses.<\/p>\n<p>The tests are automatically created by using the API&#8217;s OpenAPI Definition file (OpenAPI Contract) to test the following:<\/p>\n<ol>\n<li>Does the API conform to the API Design i.e. does it do what it is supposed \u00a0to do according to the design<\/li>\n<li>Does it perform as it is supposed to &#8211; does it only allow the expected traffic and reject not expected traffic.<\/li>\n<li>Are there any security weakness based on how the API is implemented.<\/li>\n<\/ol>\n<p>Here is an explainer video<br \/><div class=\"ast-oembed-container \" style=\"height: 100%;\"><iframe loading=\"lazy\" title=\"What is API Scan\" src=\"https:\/\/player.vimeo.com\/video\/884864394?h=b167153ec4&amp;dnt=1&amp;app_id=122963\" width=\"500\" height=\"313\" frameborder=\"0\" allow=\"autoplay; fullscreen; picture-in-picture; clipboard-write\"><\/iframe><\/div><\/p>\n\t\t\t\t\t\t<h5>Where can I run the API Scan from?<\/h5>\n\t\t\t<p>API Scan is available in VS Code IDE (via the <a href=\"https:\/\/marketplace.visualstudio.com\/items?itemName=42Crunch.vscode-openapi\" target=\"_blank\" rel=\"noopener\">42Crunch OpenAPI Editor extension<\/a>) and <a href=\"https:\/\/github.com\/marketplace\/actions\/42crunch-rest-api-dynamic-security-testing-freemium\" target=\"_blank\" rel=\"noopener\">GitHub Actions<\/a> CI\/CD.\u00a0 It is available for free with limited usage and non commercial basis (see Freemium FAQ section above). <\/p>\n<p>You can also run API Scan on the 42Crunch platform. This is available only to paid subscribers.<\/p>\n\t\t\t\t\t\t<h5>How do I run the API Scan from IDE?<\/h5>\n\t\t\t<p>There is an option to run API Scan for freemium users from VS Code IDE We will be expanding to IntelliJ and Eclipse in the coming months.\u00a0<\/p>\n<p>Please visit our dedicated video tutorial page on <a href=\"https:\/\/staging2022.42crunch.com\/tutorial-security-conformance-scan-openapi-swagger-extension-vs-code\/\" target=\"_blank\" rel=\"noopener\">running API scan in VS code<\/a><\/p>\n\t\t\t\t\t\t<h5>How do I run the API Scan from CI\/CD?<\/h5>\n\t\t\t<p>There is an option to run the API Scan for freemium users from GitHub Actions. We will be expanding to Azure DevOps and other CI\/CD platforms in the coming months.\u00a0<\/p>\n<p>Please take a look at a tutorial video on how to run the API Security Audit &amp; API Scan for freemium users from GitHub.<\/p>\n<p><div class=\"ast-oembed-container \" style=\"height: 100%;\"><iframe loading=\"lazy\" title=\"Freemium Tutorial\" src=\"https:\/\/player.vimeo.com\/video\/884851346?h=8afde3bb4a&amp;dnt=1&amp;app_id=122963\" width=\"500\" height=\"313\" frameborder=\"0\" allow=\"autoplay; fullscreen; picture-in-picture; clipboard-write\"><\/iframe><\/div><\/p>\n\t\t\t\t\t\t<h5>How does API Security Testing  work with 42Crunch?<\/h5>\n\t\t\t<p><a href=\"https:\/\/staging2022.42crunch.com\/api-security-testing\/\">API Security Testing<\/a> with 42Crunch combines a number of our tools and integrates in the development lifecycle of the API as follows:<\/p>\n<ol>\n<li>OpenAPI Editor &#8211; we help developers create and edit OpenAPI definition files using our Free <a href=\"https:\/\/staging2022.42crunch.com\/ide-api-integrations\/\" target=\"_blank\" rel=\"noopener\">OpenAPI editor tool<\/a> in their favorite IDEs<\/li>\n<li><a href=\"https:\/\/staging2022.42crunch.com\/api-security-audit\/\" target=\"_blank\" rel=\"noopener\">API Audit<\/a> &#8211; checks the API Design file for different structure, semantic and security flaws, marks the API Design file out of a score of 100 and also offers remediation advice and quick ways to fix the issues identified. This way you can quickly fix and create a robust OpenAPI contract. (more info above)<\/li>\n<li><a href=\"https:\/\/staging2022.42crunch.com\/api-conformance-scan\/\" target=\"_blank\" rel=\"noopener\">API Scan<\/a> &#8211; checks the actual API for security flaws by sending dynamic traffic to it. The tests we do are based on the API design file of the same API. More Above<\/li>\n<\/ol>\n<p>Now we also add in some additional things like data dictionaries to help standardize definitions used across all APIs, security quality gates that can prevent changes to APIs going into production without first having passed an approved score in both the API Audit and API Scan checks and finally we give all of this visibility to security teams which enables security teams and development teams work together with agreed security policies in a faster and more secure development process.<\/p>\n<p>There are multiple benefits to upgrading to a paid subscription (<a href=\"#Subscription-Upgrade\">see section below<\/a>) but if you are unsure then please r<a href=\"https:\/\/staging2022.42crunch.com\/introductory-call\/\" target=\"_blank\" rel=\"noopener\">equest an introductory call<\/a> with one of our pre-sales engineers who can discuss your requirements with you.<\/p>\n\t\t\t\t\t\t<h5>I am a  GitHub user, how can I setup API security testing for free?<\/h5>\n\t\t\t<p>We have put together this video to help you use our API Security Testing Tools from GitHub Actions as a Free User<\/p>\n<p><div class=\"ast-oembed-container \" style=\"height: 100%;\"><iframe loading=\"lazy\" title=\"Freemium Tutorial\" src=\"https:\/\/player.vimeo.com\/video\/884851346?h=8afde3bb4a&amp;dnt=1&amp;app_id=122963\" width=\"500\" height=\"313\" frameborder=\"0\" allow=\"autoplay; fullscreen; picture-in-picture; clipboard-write\"><\/iframe><\/div><\/p>\n\t\t\t<img decoding=\"async\" src=\"https:\/\/staging2022.42crunch.com\/wp-content\/uploads\/2022\/04\/42Crunch-Quotes-Gradient.png\" alt=\"42Crunch-Quotes-Gradient\" \/>\n\t\t\t\t\t<p>One of the best API security testing and assessment tools. It makes it easy for developers to build APIs due to its feature of testing the API against 300+ vulnerabilities in data whether it be at rest or transit.<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/staging2022.42crunch.com\/wp-content\/uploads\/2023\/10\/gartner-peer-insights-logo-300x105.png\" alt=\"\" width=\"214\" height=\"75\" \/><\/p>\n\t<!-- \/.pp-testimonials -->\n\t\t<h2>\n\t\t\tAdditional\n\t\t\t\t\t\t\t\t\t\t\tFAQs\n\t\t<\/h2>\n\t\t\t<p>Below are some additional questions we get asked a lot. Let us know if you have <a href=\"https:\/\/staging2022.42crunch.com\/contact-us\/\">any other questions<\/a><\/p>\t\t\n\t\t\t\t\t\t<h5>Which IDEs do you support for Freemium?<\/h5>\n\t\t\t<p>Currently we support <a href=\"https:\/\/marketplace.visualstudio.com\/items?itemName=42Crunch.vscode-openapi\" target=\"_blank\" rel=\"noopener\">VSCode<\/a> from Microsoft for freemium. \u00a0<a href=\"https:\/\/plugins.jetbrains.com\/plugin\/14837-openapi-swagger-editor\" target=\"_blank\" rel=\"noopener\">IntelliJ<\/a> from Jetbrains and<a href=\"https:\/\/marketplace.eclipse.org\/content\/openapi-swagger-editor\" target=\"_blank\" rel=\"noopener\"> Eclipse<\/a> will follow. All three integrate with our API Security platform and paid subscriptions.<\/p>\n\t\t\t\t\t\t<h5>Which CI\/CD pipelines do you support?<\/h5>\n\t\t\t<p>Currently 42Crunch offers a freemium solution on GitHub Actions CI\/CD. We will be adding Azure DevOps soon.<\/p>\n<p>For paid customers we offer integrations with Bitbucket, Azure Pipelines, Bamboo, Jenkins, Gitlab, GitHub Actions and Sonarqube. We also offer an API audit container for custom integrations.<\/p>\n\t\t\t\t\t\t<h5>I currently use the 42Crunch API Audit which I got from one of the IDE marketplaces. Is this different to the freemium option from CI\/CD?<\/h5>\n\t\t\t<p>Essentially the API audit on IDE and CI\/CD are the same so when you run an audit in IDE or CI\/CD both run the same checks on the OpenAPI contract. There are some differences however between IDE and CI\/CD functionality as these platforms are different. In the IDE for example you can edit the OpenAPI contract while in the CI\/CD you cannot. This is why you get extra allowance to run 100 operation audits in the IDE. You can also view the Audit and Scan reports in the IDE whereas you cannot see the full report on the CI\/CD pipeline. We can push the results into GitHub Codespaces for CI\/CD though.<\/p>\n\t\t\t\t\t\t<h5>What is Data Dictionary?<\/h5>\n\t\t\t<p>The Data Dictionary capability helps organizations define a dictionary of formats that should be used in APIs. <\/p>\n<p>By harmonizing what formats your APIs can accept you can increase their security as the stricter data definition quality for input and output data narrows down the attack surface. <\/p>\n<p>For developers, this means that they do not have to reinvent the wheel but can check the data dictionaries for formats already in use and use the existing ones.<\/p>\n<p>Here is an explainer video<br \/><div class=\"ast-oembed-container \" style=\"height: 100%;\"><iframe loading=\"lazy\" title=\"What is a Data Dictionary\" src=\"https:\/\/player.vimeo.com\/video\/879316342?h=8df2b78d09&amp;dnt=1&amp;app_id=122963\" width=\"500\" height=\"281\" frameborder=\"0\" allow=\"autoplay; fullscreen; picture-in-picture; clipboard-write\"><\/iframe><\/div><\/p>\n\t\t\t\t\t\t<h5>Do I have to use the Data Dictionaries?<\/h5>\n\t\t\t<p>The freemium edition does not come with a data dictionary\u00a0<\/p>\n<p>With a paid subscription multiple data dictionaries can be created and customized to meet your organization&#8217;s specific needs.<\/p>\n\t\t\t\t\t\t<h5>What is a Security Quality Gate (SQG)?<\/h5>\n\t\t\t<p>Security Quality Gates (SQGs) help implement security compliance and governance across the enterprise.\u00a0<\/p>\n<p>SQGs can highlight or prevent APIs or changes to APIs from being committed via CI\/CD pipelines without first having passed an approved threshold. SQGs apply both to API Audit and API Scan static and dynamic reports.<\/p>\n<p>In the IDE, SQGs will highlight to the developer if the score on either the API Audit or API Scan reports is not sufficient to pass the required standard.\u00a0<\/p>\n<p>In CI\/CD there is an option to either enforce the SQG or just report on the SQG.\u00a0<\/p>\n<p>For paid subscriptions you can customize the SQGs.<\/p>\n<p>This video will explain Security Quality Gates<\/p>\n<p><div class=\"ast-oembed-container \" style=\"height: 100%;\"><iframe loading=\"lazy\" title=\"What is a Security Quality Gate\" src=\"https:\/\/player.vimeo.com\/video\/887529153?h=c05d96306a&amp;dnt=1&amp;app_id=122963\" width=\"500\" height=\"313\" frameborder=\"0\" allow=\"autoplay; fullscreen; picture-in-picture; clipboard-write\"><\/iframe><\/div><\/p>\n\t\t\t\t\t\t<h5>Do I have to use Security Quality Gates?<\/h5>\n\t\t\t<p>For paid subscribers In the IDE, you can see the security quality gates status. This means developers can determine whether they would pass the SQG threshold. <\/p>\n<p>In the CICD pipeline, SQGs enforcement can be turned on or off.<\/p>\n\t\t<h2>\n\t\t\tSubscription Upgrade\n\t\t\t\t\t\t\t\t\t\t\tFAQs\n\t\t<\/h2>\n\t\t\t<p>Below are some frequently asked questions in relation to how and why to upgrade your subscription.<\/p>\t\t\n\t\t\t\t\t\t<h5>Can I purchase extra Audit and Scan allowances for one or two months?<\/h5>\n\t\t\t<p>Yes. You can upgrade to a paid solution offering either on a monthly or annual subscription level. See <a href=\"https:\/\/staging2022.42crunch.com\/pricing\/\">Pricing<\/a>.\u00a0<\/p>\n<p>If you want to only purchase for one or two months then you will need to cancel your monthly subscription when you no longer need it any more.<\/p>\n\t\t\t\t\t\t<h5>Why should I upgrade to a paid subscription?<\/h5>\n\t\t\t<p>If you want to collaborate as part of a team, or increase the volume of audits and scans as you get closer to production, then you should consider <a href=\"https:\/\/staging2022.42crunch.com\/teams-pricing\/\">upgrading to a paid subscription<\/a> model to get unlimited usage. <\/p>\n<p>You also can avail of other features such as customized Security Quality Gates and Data Dictionaries.<\/p>\n\t\t\t\t\t\t<h5>Can I buy a single developer solution?\t<\/h5>\n\t\t\t<p>Yes. We offer a sliding scale of prices from a base entry level price for up to 5 users all the way to 25 users as part of our <a href=\"https:\/\/staging2022.42crunch.com\/teams-pricing\/\">Teams pricing<\/a>.<\/p>\n<p>If you have any special requests please <a href=\"https:\/\/staging2022.42crunch.com\/contact-us\/\">contact us.<\/a><\/p>\n\t\t\t\t\t\t<h5>What level of support do I get with a paid subscription?<\/h5>\n\t\t\t<p>42Crunch offers both Standard and Premium Support and Maintenance services for the 42Crunch Platform. <\/p>\n<p>The services delivered are subject to the Master Customer Agreement entered into between a paying subscriber and 42Crunch. <\/p>\n<p>For further information about our support levels please <a href=\"https:\/\/staging2022.42crunch.com\/contact-us\/\">contact us<\/a>.<\/p>\n\t\t\t\t\t\t<h5>Can my team get a no usage limits free trial of the 42Crunch services?<\/h5>\n\t\t\t<p>Yes. We offer a <a href=\"https:\/\/staging2022.42crunch.com\/request-enterprise-free-trial\/\">full enterprise free trial,<\/a> with unlimited API Security Audits and Scans for up to 50 users and 50 APIs for a 90 day period.<\/p>\n<p>\u00a0<\/p>\n\t\t\t\t\t\t<h5>What are my subscription payment options?<\/h5>\n\t\t\t<p>You can use your credit card to pay for any monthly or annual &#8220;Teams&#8217; subscription.<\/p>\n<p>If you sign up for any annual subscription then we can arrange that you pay by bank transfer. Please <a href=\"https:\/\/staging2022.42crunch.com\/contact-us\/\" target=\"_blank\" rel=\"noopener\">contact us<\/a> to arrange this option.<\/p>\n\t\t\t\t\t\t<h5>I have a teams account how can I upgrade to add more users?<\/h5>\n\t\t\t<p>You can upgrade your &#8220;Teams&#8221; subscription by using the <a href=\"https:\/\/billing.stripe.com\/p\/login\/3csaGd9xzf5k7n2aEE\">billing porta<\/a>l to upgrade to the next &#8220;Teams&#8221; level or <a href=\"https:\/\/staging2022.42crunch.com\/enterprise-sales-enquiry\/\" target=\"_blank\" rel=\"noopener\">contact our sales team<\/a> for an Enterprise account (25+ users working on 10+ APIs).<\/p>\n\t\t\t\t\t\t<h5>How do I cancel my subscription?<\/h5>\n\t\t\t<p>If you are on a &#8220;Teams&#8221; subscription then you can manage your subscription by logging into the <a href=\"https:\/\/billing.stripe.com\/p\/login\/3csaGd9xzf5k7n2aEE\">billing portal<\/a>.<\/p>\n<p>If you are an enterprise customer you can contact our billing team or your account manager directly.<\/p>\n\t\t\t\t\t\t<h5>What additional API Security services does 42Crunch provide? <\/h5>\n\t\t\t<p><b>42Crunch API Security Platform<\/b><b><br \/><\/b><\/p>\n<p>The <a href=\"https:\/\/staging2022.42crunch.com\/api-security-platform\/\">42Crunch API Security platform<\/a> proactively tests, fixes and protects APIs from development to runtime. It offers a range of services in addition to the security testing capabilities of API Audit and Scan outlined above. These additional services are:<\/p>\n<p><a href=\"https:\/\/staging2022.42crunch.com\/api-capture\/\"><strong>API Capture<\/strong><\/a> &#8211; Available extra to paid subscribers only.<\/p>\n<p>Don&#8217;t want to build OpenAPI contracts from scratch or have lots of APIs without OpenAPI design files?\u00a0 <a href=\"https:\/\/42crunch.com\/api-capture\/\">API Capture<\/a> can use traffic data, Postman collections, API test configurations and even half built OpenAPI files to automatically build OpenAPI contracts saving your developers lots of time and effort. It will also save your front end, backend teams and testing teams time as they now have a design file to work off.<\/p>\n<p>Here is a video explainer:<\/p>\n<p><div class=\"ast-oembed-container \" style=\"height: 100%;\"><iframe loading=\"lazy\" title=\"The API Capture Dashboard\" src=\"https:\/\/player.vimeo.com\/video\/883121361?h=0355d32564&amp;dnt=1&amp;app_id=122963\" width=\"500\" height=\"313\" frameborder=\"0\" allow=\"autoplay; fullscreen; picture-in-picture; clipboard-write\"><\/iframe><\/div><\/p>\n<p><a href=\"https:\/\/staging2022.42crunch.com\/micro-api-firewall-protection\/\"><strong>API Protect<\/strong><\/a> &#8211; Available extra to paid subscribers only.<\/p>\n<p><a href=\"https:\/\/42crunch.com\/micro-api-firewall-protection\/\">API Protect<\/a> is an API micro-firewall that enforces the API security policy at runtime. It creates an allowlist of valid operations from the API&#8217;s OpenAPI contract and enforces the contract on all incoming and outgoing operations. The micro-firewall will automatically change when any changes are made to the OpenAPI contract.<\/p>\n<p>Here is a video explainer:<\/p>\n<p><div class=\"ast-oembed-container \" style=\"height: 100%;\"><iframe loading=\"lazy\" title=\"What is API Protect\" src=\"https:\/\/player.vimeo.com\/video\/880133276?h=2ceb43a6bf&amp;dnt=1&amp;app_id=122963\" width=\"500\" height=\"281\" frameborder=\"0\" allow=\"autoplay; fullscreen; picture-in-picture; clipboard-write\"><\/iframe><\/div><\/p>\n<h2>\n\t\tReady to Learn More?\n\t<\/h2>\n\t<p>Developer-first solution for delivering API security as code.<\/p>\n\t\t\t<a href=\"https:\/\/staging2022.42crunch.com\/get-started\/\" target=\"_self\" rel=\"noopener\">\n\t\t\t\t\t\t\tGet Started\n\t\t\t\t\t<\/a>\n\n","protected":false},"excerpt":{"rendered":"<p>Freemium User FAQ Helping you fix Your APIs today and prevent API breaches tomorrow This FAQ page addresses the most commonly asked questions by freemium users of our API Security Testing services. If you don&#8217;t find the answer to your questions below, please contact us or log a ticket on our support desk and we&#8217;ll [&hellip;]<\/p>\n","protected":false},"author":7,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_seopress_robots_primary_cat":"","_seopress_titles_title":"Free API Security Users FAQ Section","_seopress_titles_desc":"Learn more about 42Crunch Free products and what you get with your Free Subscription ","_seopress_robots_index":"","site-sidebar-layout":"no-sidebar","site-content-layout":"disabled","ast-site-content-layout":"full-width-container","site-content-style":"unboxed","site-sidebar-style":"unboxed","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"disabled","ast-hfb-above-header-display":"disabled","ast-hfb-below-header-display":"disabled","ast-hfb-mobile-header-display":"disabled","site-post-title":"disabled","ast-breadcrumbs-content":"disabled","ast-featured-img":"disabled","footer-sml-layout":"disabled","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"set","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""}},"footnotes":""},"_links":{"self":[{"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/pages\/17526"}],"collection":[{"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/comments?post=17526"}],"version-history":[{"count":2,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/pages\/17526\/revisions"}],"predecessor-version":[{"id":18530,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/pages\/17526\/revisions\/18530"}],"wp:attachment":[{"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/media?parent=17526"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}