Stage 1
graphw00f
Confidence 96%
Independent from schema hints; relies on parsing and protocol behavior (high confidence tier)
GQL Recon Atlas
Scope
Visualizes recovery techniques, defense coverage, and a deterministic playbook across hardening modes from introspection status to APQ-only constraints.
Active profile
Introspection disabled + suggestions masked
Suggestions hidden and validation hints are genericized
Endpoint: https://api.example.com/graphql
| Technique | Introspection enabled | Introspection disabled | Introspection disabled + suggestions masked | Introspection disabled + APQ enforced | Introspection disabled + masked + APQ-only |
|---|---|---|---|---|---|
Clairvoyance field-discovery | 98% high • high | 86% high • high | 57% low • medium | 62% medium • medium | 33% blocked • low |
graphw00f fingerprinting | 99% high • high | 92% high • high | 90% high • high | 90% high • high | 88% high • high |
graphql-cop hardening-audit | 96% high • high | 78% medium • medium | 84% high • high | 70% medium • medium | 83% high • high |
BatchQL efficiency-orchestrator | 94% high • high | 69% medium • medium | 31% blocked • low | 44% low • low | 24% blocked • low |
Metadata Bootstrap baseline | 99% high • high | 8% blocked • blocked | 6% blocked • blocked | 15% blocked • low | 4% blocked • blocked |
Conservative Proxy Replay runtime-validation | 66% medium • medium | 58% low • medium | 52% low • medium | 55% low • medium | 47% low • medium |
Ordered by deterministic scoring using scenario-aligned confidence and technique maturity.
Stage 1
Confidence 96%
Independent from schema hints; relies on parsing and protocol behavior (high confidence tier)
Stage 2
Confidence 87%
Still detects multiple GraphQL hardening indicators outside suggestions (high confidence tier)
Stage 3
Confidence 63%
Generic errors reduce oracle signal quality and require broader fuzzing loops (medium confidence tier)