Excessive Data Exposure Detector
Compare API response samples against OpenAPI schemas to detect extra undeclared sensitive fields that should not be in responses. Free OWASP tool by Graph Tools.
Use this free excessive data exposure detector to compare actual API response samples against their declared OpenAPI schema. The tool flags fields present in the response that are not declared in the spec — particularly those with names suggesting sensitive data (tokens, personal information, admin flags). Addresses OWASP API3 Excessive Data Exposure.