overstep is an open-source project built for API developers and security engineers.

Yes — overstep is open source under the Apache-2.0 license and free to use.

What platforms does overstep run on?

overstep runs on the command line.

Is overstep still maintained?

The GitHub repository shows 20 commits in the last 90 days.

What projects are similar to overstep?

Similar projects tracked by PulseGate include CordonAI Geo Access and Redirect, Carbon VPN - Fast & Secure, and Nobulink M-Token.

overstep is developed by kabiri-labs.

How long has overstep been around?

overstep first shipped in 2025.

Back to the index

overstep

Name: overstep
Author: kabiri-labs

PyPIInfrastructure

overstep is an open-source CLI tool for testing HTTP APIs against authorization vulnerabilities like BOLA and BFLA. It uses matrix-driven testing to identify privilege escalation and drift, helping developers and security teams secure their APIs.

Open SourceApache-2.0CLI

Visit PyPI

1star

7features

2025since

Overview

7 features

overstep sits in PulseGate's Security & compliance platforms category. It focuses on detecting and preventing authorization vulnerabilities in HTTP APIs, such as privilege escalation and auth drift. overstep is an open-source project aimed at API developers and security engineers. overstep is open source under the Apache-2.0 license. overstep is available on the command line.

It is developed by kabiri-labs, and it first shipped in 2025. The project is developed in the open on GitHub with 20 commits in the last 90 days. Key capabilities include authorization testing, matrix-driven tests, and BOLA/BFLA detection.

Summary written by a language model from the project’s public pages.

Authorization testing
Matrix-driven tests
BOLA/BFLA detection
API security
CI integration
Privilege escalation checks
Apache-2.0 license

Built with & integrations

Runs on

CLI

Trust & compliance

License

Apache-2.0

Verified signals

HTTPSOpen SourceFree tierGitHub · ★ 1Active maintenance

Indexing history

What PulseGate has recorded for this listing

Indexed9 Jul · 15:35 UTC
overstep verified against its public source
Source: PulseGate · Open

Frequently asked questions about overstep

What is overstep?: Overstep focuses on detecting and preventing authorization vulnerabilities in HTTP APIs, such as privilege escalation and auth drift. It is catalogued under Security & compliance platforms on PulseGate.
Who is overstep for?: overstep is an open-source project built for API developers and security engineers.
Is overstep free?: Yes — overstep is open source under the Apache-2.0 license and free to use.
What platforms does overstep run on?: overstep runs on the command line.
Is overstep still maintained?: The GitHub repository shows 20 commits in the last 90 days.
What projects are similar to overstep?: Similar projects tracked by PulseGate include CordonAI Geo Access and Redirect, Carbon VPN - Fast & Secure, and Nobulink M-Token.CordonAI Geo Access and Redirect Carbon VPN - Fast & Secure Nobulink M-Token
Who makes overstep?: overstep is developed by kabiri-labs.
How long has overstep been around?: overstep first shipped in 2025.

At a glance

Platforms: Cli
Languages: English
Open source: Yes · ★ 1
License: Apache-2.0
Built for: API developers and security engineers
Model: Open source
Solves: Detecting and preventing authorization vulnerabilities in HTTP APIs, such as privilege escalation and auth drift.

Registered as

GitHub: kabiri-labs/overstep
PyPI: overstep

Developer

kabiri-labs

Solo developer

GitHub

Open source

View on GitHub

Stars: 1
Forks: 0
Open issues: 0
Last commit: 9 Jul 2026
Commits 90d: 20
Contributors: 1
Authorship: Solo
Default branch: main
Latest release: v0.10.0 · 9 Jul 2026

Live coverage

Identity confidence: Low · 64
Indexed: 9 Jul 2026
Lifecycle: Unverified
Last seen: 9 Jul 2026

Identity audit (12)

Slug: overstep-pypi-org
Verification state: Indexed for public listing
Listing state: Listed: yes
Index status: Included in index
Latest evidence snapshot: 9 Jul 2026
Timeline basis: Indexed-at chronology. This listing's first-seen date was written by the catalog backfill, not observed here, so it is not treated as a sighting.
Name from: Written by a language model from the project's public pages.
Category from: Assigned by a language model.
Summary from: Written by a language model from public pages.
Languages from: Detected by a language model from page content.
Last updated: 9 Jul 2026
Canonical URL: https://pypi.org/project/overstep

Ship this? Send a correction — no account, and you get a link to follow it.

Also in Security & compliance platforms

Same category — not a similarity match