42Crunch

OpenAPI-first API security that audits the contract, tests it, then wraps a micro-firewall around the live endpoint.

Proof of life. Released OAS 3.1 support for API Protection in the 42Crunch platform, February 2026

42Crunch starts from the OpenAPI spec: static audit, conformance testing, then a protection proxy generated from that same contract. Runtime therefore enforces what the designer promised, not a generic WAF rule set. Platform releases in 2026 added OAS 3.1 support on the protection path, which is the unglamorous work that keeps contract-based security from rotting as specs move.

Category: API and runtime
Headquarters: Dublin, Ireland
Country: Ireland
Founded: 2016
Funding stage: n/a
Total funding: n/a
Website: https://42crunch.com