From 25251eccf20f9bd067b19fb6567cb449593815b0 Mon Sep 17 00:00:00 2001
From: Lang Li <311116828+Aivist@users.noreply.github.com>
Date: Sat, 15 Aug 2026 19:28:05 +1000
Subject: [PATCH] Add Aivist Verify to Authorization Testing

---
 README.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/README.md b/README.md
index ae831ee..bab635e 100644
--- a/README.md
+++ b/README.md
@@ -88,6 +88,7 @@ Authorization testing ensures that users and API clients can only access resourc
 13. **[IAM Vulnerability Scanner](https://github.com/nccgroup/iam-vulnerability-scanner)** – Identifies IAM misconfigurations in APIs.
 14. **[GraphQL Voyager](https://github.com/APIs-guru/graphql-voyager)** – Visualizes GraphQL permissions to detect flaws.
 15. **[CyberChef](https://gchq.github.io/CyberChef/)** – Decodes and analyzes authorization tokens.
+16. **[Aivist Verify](https://github.com/Aivist/Aivist-Verify)** – Confirms BOLA/IDOR candidates locally; a deterministic downgrade-only code gate decides each verdict and emits a replayable evidence chain.
 
 ---