Levo by Levo

Levo does a ton of neat stuff with only a lightweight ebpf agent. They create full API schemas which can be real sources of truth, detect version changes, run DAST testing, and look for missing auth tokens. This covers areas where I most commonly see misconfigurations lead to actual exploits - accidental configs of public APIs without authentication. They are more on the testing side of API security.