RouteWarden

RouteWarden is a web app + CI tool that inventories every HTTP route your product exposes and enforces security rules on them before deployment. It builds an always-current endpoint catalog from OpenAPI/GraphQL schemas, gateway logs, and code scanning, then flags dangerous patterns: missing auth on sensitive routes, inconsistent role checks, unsafe methods, unbounded pagination, missing rate limits, and data-heavy responses on public endpoints. The MVP focuses on fast, actionable findings with minimal false positives: it maps endpoints to owners, shows the exact commit/PR that introduced the route, and provides a “fix checklist” tailored to your framework. It integrates with GitHub/GitLab to comment on pull requests and can fail builds based on policy. This is not a generic DAST scanner; it’s a governance layer for endpoint sprawl, which is where many real breaches start.