---
title: Install VulnAPI on Debian using the Snap Store | Snapcraft
description: 'Get the latest version of VulnAPI for on Debian - VulnAPI: An API Security
  Vulnerability Scanner'
url: https://snapcraft.io/install/vulnapi/debian
---

[Canonical Snapcraft](https://snapcraft.io/)

# Install VulnAPI on **Debian**

# VulnAPI

[CerberAuth](https://snapcraft.io/publisher/cerberauth "View all snaps from CerberAuth")

* [CerberAuth](https://snapcraft.io/publisher/cerberauth "View all snaps from CerberAuth")
* [Development](https://snapcraft.io/search?categories=development)
* [Security](https://snapcraft.io/search?categories=security)

[Install](https://snapcraft.io/install/vulnapi/debian#install)

#### VulnAPI: An API Security Vulnerability Scanner

**VulnAPI** is an open-source Dynamic Application Security Testing (DAST) tool designed to help developers and security engineers scan APIs for common vulnerabilities and weaknesses before attackers can exploit them.

**Scan methods**

* **Curl-like CLI** — point VulnAPI at any API URL with curl-style options for a quick one-off scan
* **OpenAPI contracts** — feed an OpenAPI spec (local file or URL) to scan all documented endpoints automatically

**Discover command**

Before scanning, use the `discover` command to fingerprint a target API: detect exposed files, well-known paths, GraphQL endpoints, OpenAPI specs, and the underlying framework, language, and server.

**What it detects**

* JWT vulnerabilities (alg=none bypass, blank secret, null signature, HMAC confusion, weak secrets)
* Missing or misconfigured security headers (CSP, CORS, HSTS, X-Frame-Options, X-Content-Type-Options)
* Unauthenticated endpoint exposure
* And more — see <https://www.cerberauth.com/docs/vulnapi/vulnerabilities> for the full list

**Reports**

Each scan produces a detailed report per operation with risk level, CVSS 4.0 score, OWASP category, and a description of every finding.

**Additional features**

* Proxy support via `--proxy` flag or `HTTP_PROXY` / `HTTPS_PROXY` environment variables
* Anonymous telemetry opt-out with `--sqa-opt-out`

*This tool is intended for authorised security testing and educational purposes only. Never scan systems you do not own or have explicit written permission to test.*

* Documentation: <https://www.cerberauth.com/docs/vulnapi/>
* Source: <https://github.com/cerberauth/vulnapi>

### Package name

* vulnapi

---

### License

* MIT

---

### Last updated

* 30 August 2026 - latest/stable
* 30 August 2026 - latest/edge

---

### Websites

* [www.cerberauth.com](https://www.cerberauth.com/vulnapi/ "https://www.cerberauth.com/vulnapi/")
* [www.cerberauth.com](https://www.cerberauth.com/docs/vulnapi/ "https://www.cerberauth.com/docs/vulnapi/")

---

### Contact

* [www.cerberauth.com](https://www.cerberauth.com/ "https://www.cerberauth.com/")

---

### Source code

* [github.com/cerberauth/vulnapi](https://github.com/cerberauth/vulnapi "https://github.com/cerberauth/vulnapi")

---

### Report a bug

* [github.com/cerberauth/vulnapi/issues](https://github.com/cerberauth/vulnapi/issues "https://github.com/cerberauth/vulnapi/issues")

---

##### Report a Snap Store violation

* [Report this Snap](https://snapcraft.io/install/vulnapi/debian#report-snap-modal)

---

## Enable snaps on Debian and install VulnAPI

Snaps are applications packaged with all their dependencies to run on all popular Linux distributions from a single build. They update automatically and roll back gracefully.

Snaps are discoverable and installable from the [Snap Store](https://snapcraft.io/store), an app store with an audience of millions.

### Enable snapd

On Debian 9 (Stretch) and newer, snap can be installed directly from the command line:

```
sudo apt update
sudo apt install snapd
```

After this, install the snapd snap in order to get the latest snapd:

```
sudo snap install snapd
```

### Install VulnAPI

To install VulnAPI, simply use the following command:

```
sudo snap install vulnapi
```

### Other popular snaps…

[See more...](https://snapcraft.io/search?categories=featured)

[See more in Featured](https://snapcraft.io/search?categories=featured)

### More things to do…

#### [Get the snap store](https://snapcraft.io/snap-store)

Browse and find snaps from the convenience of your desktop using the snap store snap.

#### [Learn more about snaps](https://snapcraft.io/docs)

Interested to find out more about snaps? Want to publish your own application? Visit [snapcraft.io](https://snapcraft.io/) now.

[Back to top](https://snapcraft.io/install/vulnapi/debian)

© 2026 Canonical Ltd.
Ubuntu and Canonical are registered trademarks of Canonical Ltd.

Powered by [Charmed Kubernetes](https://www.ubuntu.com/kubernetes)

[Join the forum](https://forum.snapcraft.io/), contribute to or report problems with,
[snapd](https://bugs.launchpad.net/snapd),
[Snapcraft](https://bugs.launchpad.net/snapcraft),
or [this site](https://github.com/canonical/snapcraft.io/issues/new).

* [Share on Twitter](https://twitter.com/snapcraftio)
* [Share on Facebook](https://www.facebook.com/snapcraftio)
* [Share on YouTube](https://www.youtube.com/snapcraftio)

* [Terms of Service](https://ubuntu.com/legal/terms-and-policies/snap-store-terms)
* [Data privacy](https://www.ubuntu.com/legal/data-privacy)
* [Manage your tracker settings](https://snapcraft.io/install/vulnapi/debian)
* [Service status](https://status.snapcraft.io/)
* [Other functions](https://dashboard.snapcraft.io/)
* [Contact us](https://snapcraft.io/about/contact-us)
