Hi all, I've just published an open source security tool called AuthCov. It scans the role-based access control of your web application using a chrome headless browser, so works for SPA+APIs as well as normal sites.
https://github.com/authcov/authcov
Any feedback on the tool would be much appreciated, and ideas on how to monetise this! Thanks