42Crunch

What the company sells

42Crunch sells an API security platform that tests APIs against their contract before they reach production, protects them at runtime, and extends the same approach to the MCP servers that AI agents call and expose. The company was founded in London, UK, where it remains headquartered alongside other offices.

Categories

• API security (primary category)
• AI model and agent security
• Dynamic application security testing

Headquarters

London, United Kingdom

Founded

Not established from our sources

Ownership

Not established from our sources

Website

42crunch.com

Products and services

• 42Crunch API Security Platform

  Combines continuous security testing with runtime protection so API vulnerabilities are caught before production and malicious requests, including AI-driven probing and schema abuse, are blocked in real time.

• API Security & Governance

  Generates static and dynamic tests directly from a service's OpenAPI definition and runs them in the pipeline, checking for issues such as broken object-level authorization, broken authentication, mass assignment and unrestricted resource consumption.

• MCP Server Security

  Discovers the MCP servers that AI agents expose or consume, applies the same contract-driven security checks used for APIs, and assesses them against AI regulations and security frameworks.

Sources

1. 42CrunchPublished November 21, 2018 · Tier A: the company, a regulator or a filing
2. 42CrunchUndated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
3. 42CrunchPublished February 11, 2026 · Tier A: the company, a regulator or a filing

Recorded September 27, 2026 from the sources above. Descriptions are in our own words; we do not rank or recommend vendors, and no vendor pays to be listed or to change what we write. Disclosure: until the publisher confirms it has no business relationship with this company, treat one as possible (how the network works). Spot a factual error? Request a correction.