---
title: Install VulnAPI on Red Hat Enterprise Linux using the Snap Store | Snapcraft
description: 'Get the latest version of VulnAPI for on Red Hat Enterprise Linux -
  VulnAPI: An API Security Vulnerability Scanner'
url: https://snapcraft.io/install/vulnapi/rhel
---

[Canonical Snapcraft](https://snapcraft.io/)

# Install VulnAPI on **Red Hat Enterprise Linux**

# VulnAPI

[CerberAuth](https://snapcraft.io/publisher/cerberauth "View all snaps from CerberAuth")

* [CerberAuth](https://snapcraft.io/publisher/cerberauth "View all snaps from CerberAuth")
* [Development](https://snapcraft.io/search?categories=development)
* [Security](https://snapcraft.io/search?categories=security)

[Install](https://snapcraft.io/install/vulnapi/rhel#install)

#### VulnAPI: An API Security Vulnerability Scanner

**VulnAPI** is an open-source Dynamic Application Security Testing (DAST) tool designed to help developers and security engineers scan APIs for common vulnerabilities and weaknesses before attackers can exploit them.

**Scan methods**

* **Curl-like CLI** — point VulnAPI at any API URL with curl-style options for a quick one-off scan
* **OpenAPI contracts** — feed an OpenAPI spec (local file or URL) to scan all documented endpoints automatically

**Discover command**

Before scanning, use the `discover` command to fingerprint a target API: detect exposed files, well-known paths, GraphQL endpoints, OpenAPI specs, and the underlying framework, language, and server.

**What it detects**

* JWT vulnerabilities (alg=none bypass, blank secret, null signature, HMAC confusion, weak secrets)
* Missing or misconfigured security headers (CSP, CORS, HSTS, X-Frame-Options, X-Content-Type-Options)
* Unauthenticated endpoint exposure
* And more — see <https://www.cerberauth.com/docs/vulnapi/vulnerabilities> for the full list

**Reports**

Each scan produces a detailed report per operation with risk level, CVSS 4.0 score, OWASP category, and a description of every finding.

**Additional features**

* Proxy support via `--proxy` flag or `HTTP_PROXY` / `HTTPS_PROXY` environment variables
* Anonymous telemetry opt-out with `--sqa-opt-out`

*This tool is intended for authorised security testing and educational purposes only. Never scan systems you do not own or have explicit written permission to test.*

* Documentation: <https://www.cerberauth.com/docs/vulnapi/>
* Source: <https://github.com/cerberauth/vulnapi>

### Package name

* vulnapi

---

### License

* MIT

---

### Last updated

* 30 August 2026 - latest/stable
* 30 August 2026 - latest/edge

---

### Websites

* [www.cerberauth.com](https://www.cerberauth.com/vulnapi/ "https://www.cerberauth.com/vulnapi/")
* [www.cerberauth.com](https://www.cerberauth.com/docs/vulnapi/ "https://www.cerberauth.com/docs/vulnapi/")

---

### Contact

* [www.cerberauth.com](https://www.cerberauth.com/ "https://www.cerberauth.com/")

---

### Source code

* [github.com/cerberauth/vulnapi](https://github.com/cerberauth/vulnapi "https://github.com/cerberauth/vulnapi")

---

### Report a bug

* [github.com/cerberauth/vulnapi/issues](https://github.com/cerberauth/vulnapi/issues "https://github.com/cerberauth/vulnapi/issues")

---

##### Report a Snap Store violation

* [Report this Snap](https://snapcraft.io/install/vulnapi/rhel#report-snap-modal)

---

## Enable snaps on Red Hat Enterprise Linux and install VulnAPI

Snaps are applications packaged with all their dependencies to run on all popular Linux distributions from a single build. They update automatically and roll back gracefully.

Snaps are discoverable and installable from the [Snap Store](https://snapcraft.io/store), an app store with an audience of millions.

### Enable snapd

Snap is available for [Red Hat Enterprise Linux (RHEL) 8](https://www.redhat.com/en/enterprise-linux-8) and RHEL 7, from the 7.6 release onward.

The packages for RHEL 7, RHEL 8, and RHEL 9 are in each distribution’s respective [Extra Packages for Enterprise Linux](https://fedoraproject.org/wiki/EPEL) (EPEL) repository. The instructions for adding this repository diverge slightly between RHEL 7, RHEL 8 and RHEL 9, which is why they’re listed separately below.

The EPEL repository can be added to **RHEL 9** with the following command:

```
sudo dnf install https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm
sudo dnf upgrade
```

The EPEL repository can be added to **RHEL 8** with the following command:

```
sudo dnf install https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm
sudo dnf upgrade
```

The EPEL repository can be added to **RHEL 7** with the following command:

```
sudo rpm -ivh https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
```

Adding the *optional* and *extras* repositories is also recommended:

```
sudo subscription-manager repos --enable "rhel-*-optional-rpms" --enable "rhel-*-extras-rpms"
sudo yum update
```

Snap can now be installed as follows:

```
sudo yum install snapd
```

Once installed, the *systemd* unit that manages the main snap communication socket needs to be enabled:

```
sudo systemctl enable --now snapd.socket
```

To enable *classic* snap support, enter the following to create a symbolic link between `/var/lib/snapd/snap` and `/snap`:

```
sudo ln -s /var/lib/snapd/snap /snap
```

Either log out and back in again or restart your system to ensure snap’s paths are updated correctly.

### Install VulnAPI

To install VulnAPI, simply use the following command:

```
sudo snap install vulnapi
```

### Other popular snaps…

[See more...](https://snapcraft.io/search?categories=featured)

[See more in Featured](https://snapcraft.io/search?categories=featured)

### More things to do…

#### [Get the snap store](https://snapcraft.io/snap-store)

Browse and find snaps from the convenience of your desktop using the snap store snap.

#### [Learn more about snaps](https://snapcraft.io/docs)

Interested to find out more about snaps? Want to publish your own application? Visit [snapcraft.io](https://snapcraft.io/) now.

[Back to top](https://snapcraft.io/install/vulnapi/rhel)

© 2026 Canonical Ltd.
Ubuntu and Canonical are registered trademarks of Canonical Ltd.

Powered by [Charmed Kubernetes](https://www.ubuntu.com/kubernetes)

[Join the forum](https://forum.snapcraft.io/), contribute to or report problems with,
[snapd](https://bugs.launchpad.net/snapd),
[Snapcraft](https://bugs.launchpad.net/snapcraft),
or [this site](https://github.com/canonical/snapcraft.io/issues/new).

* [Share on Twitter](https://twitter.com/snapcraftio)
* [Share on Facebook](https://www.facebook.com/snapcraftio)
* [Share on YouTube](https://www.youtube.com/snapcraftio)

* [Terms of Service](https://ubuntu.com/legal/terms-and-policies/snap-store-terms)
* [Data privacy](https://www.ubuntu.com/legal/data-privacy)
* [Manage your tracker settings](https://snapcraft.io/install/vulnapi/rhel)
* [Service status](https://status.snapcraft.io/)
* [Other functions](https://dashboard.snapcraft.io/)
* [Contact us](https://snapcraft.io/about/contact-us)
