Every operational decision begins with trusted observations.
Modern security decisions are only as reliable as the observations that support them.
Security professionals are constantly evaluating APIs, services, and applications that generate thousands of responses every day. However, raw responses alone do not provide operational understanding.
GateKeeper exists to collect trusted observations from APIs and connected systems, transforming technical responses into structured operational telemetry that can be interpreted by the OVERWATCH platform.
Rather than replacing existing security testing tools, GateKeeper serves as the observation layer of OVERWATCH, providing accurate, repeatable, and explainable data for downstream intelligence.
Everything begins with observation.
GateKeeper's mission is to provide reliable, repeatable, and explainable API security observations that serve as the trusted foundation for operational decision intelligence.
Every observation should answer three questions:
- What happened?
- Why did it happen?
- Can the result be trusted?
GateKeeper performs the first stage of the OVERWATCH operational pipeline.
Its responsibilities include:
- API endpoint discovery
- Security validation
- Response inspection
- Header analysis
- Authentication testing
- Sensitive data exposure detection
- Operational telemetry collection
- Risk classification
- Structured observation reporting
Target System
│
▼
API Request
│
▼
Security Testing
│
▼
Telemetry Collection
│
▼
Risk Classification
│
▼
Operational Observation
│
▼
Heimdal Interpretation
- ✅ Header Validation
- ✅ HTTP Response Analysis
- ✅ Authentication Testing
- ✅ JWT Inspection
- ✅ Sensitive Data Detection
- ✅ Response Time Measurement
- ✅ Endpoint Availability
- ✅ Status Code Validation
- ⬜ OpenAPI Discovery
- ⬜ GraphQL Testing
- ⬜ OAuth Analysis
- ⬜ Rate Limiting Analysis
- ⬜ OWASP API Top 10 Coverage
- ⬜ Passive Intelligence Collection
| Risk | Meaning |
|---|---|
| 🟢 LOW | Informational Observation |
| 🟡 MEDIUM | Requires Review |
| 🟠 HIGH | Significant Security Concern |
| 🔴 CRITICAL | Immediate Attention Required |
Each finding is structured for interpretation by Heimdal and subsequent operational analysis.
GateKeeper follows a modular architecture that separates observation from interpretation.
API Target
│
▼
Scanner Engine
│
▼
Validation Modules
│
▼
Telemetry Collection
│
▼
Observation Object
│
▼
OVERWATCH Platform
GateKeeper focuses on one responsibility:
Observe accurately.
🟢 Active Development
- ✅ Core Scanner
- ✅ API Testing Framework
- ✅ Response Validation
- ✅ Risk Scoring
- ✅ Observation Model
- ⬜ Multi-target Scanning
- ⬜ Parallel Execution
- ⬜ Plugin Framework
- ⬜ Live Dashboard Integration
✔ Complete
🔄 In Progress
- GraphQL Support
- OpenAPI Discovery
- OAuth Analysis
- Passive Intelligence Collection
- Enhanced OWASP Coverage
- Distributed Scanning
- Cloud Deployment
- High Availability
- Multi-Tenant Support
gatekeeper-api-security-testing/
├── gatekeeper/
├── tests/
├── docs/
├── examples/
├── README.md
├── LICENSE
└── requirements.txt
| Technology | Purpose |
|---|---|
| Python | Core Engine |
| Pytest | Test Framework |
| Requests | HTTP Communication |
| REST APIs | Target Interfaces |
| JSON | Observation Format |
| GitHub | Source Control |
- Docker
- Kubernetes
- Go Services
- Async Processing
🌳 Yggdrasil Foundation
Engineering philosophy and standards.
🛡 OVERWATCH Platform
The operational intelligence ecosystem.
👁 Heimdal
Transforms observations into operational context.
🗄 Monolith
Preserves historical intelligence.
⚖ Odin
Produces explainable operational decisions.
🔨 Forge
Transforms decisions into recommendations.
📊 OVERWATCH Dashboard
Visualizes the complete operational picture.
This repository follows the engineering principles established by the Yggdrasil Foundation.
We believe software should:
- Solve real operational problems.
- Produce explainable results.
- Support human decision-making.
- Remain modular and maintainable.
- Be engineered with purpose.
Every project we build should leave people saying:
"This made my job easier."
Released under the MIT License.