IDOR/BOLA Security Bug Finder

A local proxy tool that automatically detects Insecure Direct Object Reference (IDOR) and Broken Object Level Authorization (BOLA) vulnerabilities during development. Helps security-conscious developers catch authorization bugs before production.

OWASP has ranked broken access control the #1 web application vulnerability since 2021, and the shift-left security movement is pushing teams to catch these issues in dev rather than post-breach — creating real demand for developer-facing auth tooling right now. Burp Suite is the closest substitute, but it's a full-featured pentest platform aimed at security professionals, not developers who just want passive detection baked into their local workflow. The $1k–5k/mo revenue band is realistic for a niche devtool if it lands in mid-sized engineering teams via a per-seat or team license, though it likely requires a generous free tier to get developers to install anything locally. The biggest risk is that IDOR detection is genuinely hard to automate with low false positives — if the tool cries wolf too often, developers stop trusting it and uninstall it within a week.