Live Idor
Live IDOR probe — tests whether other users' object IDs are reachable without authorization.
One of 119 modules in the GateTest scan suite. Catches the issue before it reaches code review, and on paid tiers opens a pull request with the fix already written.
Example finding from the liveIdor module
/api/orders/1001 readable from user B's session — IDOR confirmed
Why we catch it
Active probes against your running site. Pen Test tier only — requires explicit written authorization for the target.
The Live Idor module sits in this category alongside 4 related modules. Together they form one of the layers of a GateTest scan — checks fire in parallel, findings cluster by root cause, and on paid tiers the AI auto-fix loop reads each finding, writes the fix, validates against the scanner, and opens a PR.
How GateTest covers live idor
- ✓Runs in every scan. Included on the Full ($99), Scan + Fix ($199), and Forensic Scan ($399) tiers. No additional configuration.
- ✓Free CLI.
npm i -g gatetest && gatetest --module liveIdoragainst any local repo. No paywall on the scanning itself. - ✓AI auto-fix PR. Scan + Fix tier opens a pull request with the fix, a regression test, and a pair-review by a second Claude. Forensic Scan tier adds per-finding diagnosis and cross-finding attack-chain correlation.
- ✓Honest confidence rating. Findings come with high / medium / low confidence so noisy patterns don't block the gate. The confidence-calibrator trainer reads customer suppressions and tightens rules over time.
Scan your repo for live idor
Free preview of the headline findings. Pay per scan — no subscription.
Frequently asked questions
What does the Live Idor module catch?
Live IDOR probe — tests whether other users' object IDs are reachable without authorization. Example finding: /api/orders/1001 readable from user B's session — IDOR confirmed
Does GateTest fix Live Idor issues automatically?
Yes — on the Scan + Fix tier ($199) and Forensic Scan tier ($399), Claude reads the finding, writes the fix, validates against the scanner, writes a regression test, and opens a pull request for your review.
Which tiers include the Live Idor module?
The Full tier ($99), Scan + Fix tier ($199), and Forensic Scan tier ($399) include all 119 modules including Live Idor. The Quick tier ($29) only includes 4 essential modules.
Can I run the Live Idor module from the CLI for free?
Yes — install with `npm i -g gatetest` and run `gatetest --module liveIdor` against any local repository. Paid tiers add AI auto-fix and the cross-finding correlation work.