diff --git a/README.md b/README.md
index ae831ee..bab635e 100644
--- a/README.md
+++ b/README.md
@@ -88,6 +88,7 @@ Authorization testing ensures that users and API clients can only access resourc
 13. **[IAM Vulnerability Scanner](https://github.com/nccgroup/iam-vulnerability-scanner)** – Identifies IAM misconfigurations in APIs.
 14. **[GraphQL Voyager](https://github.com/APIs-guru/graphql-voyager)** – Visualizes GraphQL permissions to detect flaws.
 15. **[CyberChef](https://gchq.github.io/CyberChef/)** – Decodes and analyzes authorization tokens.
+16. **[Aivist Verify](https://github.com/Aivist/Aivist-Verify)** – Confirms BOLA/IDOR candidates locally; a deterministic downgrade-only code gate decides each verdict and emits a replayable evidence chain.
 
 ---