PPostman
Go faster from development to production with higher accuracy and fewer tokens.
CheckOps
Tools Directory
Tools, tech and trends for continuous quality, for humans and agents.
Curated collection of top software testing tools. Search, filter, compare two to four, and refresh public signals. Or browse by lifecycle stage.
License
Showing 1027 tools
- P
SSoapUI
SoapUI is a free and open source cross-platform functional testing solution for APIs and web services.
HHoppscotch
Open-Source API Development Ecosystem • https://hoppscotch.io • Offline, On-Prem & Cloud • Web, Desktop & CLI • Open-Source Alternative to Postman, Insomnia.
T Tuskr
Flexible test management with features for planning, executing, and analyzing test cases.
TTestRail
TestRail is AI-driven test management software for planning, executing, and reporting on testing.
A AccelQ
AccelQ is a premium testing tool offering comprehensive automated, performance, and security testing features, seamlessly integrating for Web,API and Mobile with CI/CD pipelines
BBruno
Opensource IDE For Exploring and Testing API's (lightweight alternative to Postman/Insomnia).
PPerfecto
A cloud-based test automation platform for mobile and web applications, providing real device testing.
B Beeceptor
Create AI-powered mock servers in seconds.
IInsomnia
The open-source, cross-platform API client for GraphQL, REST, WebSockets, SSE and gRPC.
RReadyAPI
The number one platform for Agile and DevOps teams, ReadyAPI powers functional, security, performance, and virtualization of SOAP & REST APIs.
TThunderclient
A Lightweight Rest Client for testing APIs. Supports collections, environments, git collaboration and local storage.
SSwaggerUI
Swagger UI is a collection of HTML, JavaScript, and CSS assets that dynamically generate beautiful documentation from a Swagger-compliant API.
KKarate
Test Automation Made Simple.
KKatalon Studio
Start API testing from today with Katalon.
DDredd
Language-agnostic HTTP API Testing Tool.
CCitrus
Framework for automated integration tests with focus on message-based applications.
HHTTPie
🥧 HTTPie CLI — modern, user-friendly command-line HTTP client for the API era.
AAPI Fortress
A comprehensive and user-friendly tool for API testing, offering extensive features like a visual test composer, end-to-end testing, and strong CI/CD integration.
AAssertible
Continuously test your web services.
PPaw (RapidAPI)
RapidAPI for Mac is a full-featured and beautifully designed Mac app that makes interaction with REST services delightful.Whether you are an API maker or consumer, RapidAPI…
SSelenium
A browser automation framework and ecosystem.
PPlaywright
Playwright is a framework for Web Testing and Automation.
CCypress
Fast, easy and reliable testing for anything that runs in a browser.
NNightWatchJS
Integrated end-to-end testing framework written in Node.js and using W3C Webdriver API.
C Capybara
Acceptance test framework for web applications.
PProtractor
E2E test framework for Angular apps.
TTestCafe
A Node.js tool to automate end-to-end web testing.
WWebDriverIO
Next-gen browser and mobile automation test framework for Node.js.
PPuppeteer
JavaScript API for Chrome and Firefox.
W Watir
An open source Ruby library for automating tests.
SSelenium IDE
Open Source record and playback test automation for the web.
P PyRestTest
YAML based api testing and API microbenchmarking tool in Python
AAppium
Cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol.
D Detox
Gray box end-to-end testing and automation framework for mobile apps.
TTestComplete Mobile
Create and run automated UI tests on any mobile application using our automated mobile testing tool, TestComplete.
RRanorex Studio
Test automation for desktop, web, and mobile apps.
RRobot Framework
Generic automation framework for acceptance testing and RPA.
XXCUITest
A test automation framework for iOS applications, part of the XCTest framework.
EEspresso
Espresso is an Android testing framework for writing concise, beautiful, and reliable UI tests that synchronize automatically with the application's UI.
UUFTOne
UFT One is a functional testing tool that supports scriptless test creation for web, mobile, API, and desktop applications.
CCalabash
An open-source automated testing librasry in Ruby for Android and iOS native and hybrid applications.
S Selendroid
"Selenium for Android" (Test automate native or hybrid Android apps and the mobile web with Selendroid.) Join us on IRC #selendroid on freenode.
WWireMock
A tool for mocking HTTP services.
KK6
k6 is an open-source tool and cloud service that makes load testing easy for developers and QA engineers.
AArtillery
The complete load testing platform.
LLoadRunner
A performance testing tool by Micro Focus, which provides a comprehensive solution for testing the performance of a wide range of applications.
PPactFlow
Fast, easy, and reliable testing for your APIs and microservices at scale.
GGatling
Modern Load Testing as Code.
PPact
Fast, easy and reliable testing for integrating web apps, APIs and microservices.
TTosca API Test
Tosca’s API Scan allows teams to easily create, manage, and execute automated API tests with a simple, no-code solution that literally anyone can use and adopt
AApiary
Apiary provides the leading API-First platform designed specifically to help companies accelerate and control the design, development, and documentation of APIs.
KKeploy
Keploy is developer-centric API testing tool that creates tests along with built-in-mocks, faster than unit tests.
RRestQA
🦏 | Best in class Microservice automation testing.
D DeepFake HTTP
DeepfakeHTTP is a web server that uses HTTP dumps as a source for responses. This tool allows you to test clients against REST, GraphQL, and other APIs.
RRunScope
API performance monitoring.
SSuperTest
Developer-friendly tool for testing Node.js HTTP servers and APIs
TTestComplete
TestComplete offers a range of powerful features to help you scale your automated ui testing efforts and maximize test coverage.
AAirborne
Airborne is an API automation testing tool built on the Ruby RSpec framework
FFiddler
Explore Fiddler's web debugging tools and proxy solutions to debug, mock, capture, and modify web and network traffic.
RRestSharp
Simple REST and HTTP API Client for .NET.
BBlazeMeter
Unify performance testing, API testing and monitoring, service virtualization, AI-powered test data, and functional testing in one platform.
JJMeter
Apache JMeter open-source load testing tool for analyzing and measuring the performance of a variety of services.
NNeoLoad
Neoload is a performance testing platform that simulates high user loads to identify and fix performance bottlenecks.
AApica
Apica is the agentic-ready telemetry pipeline that cuts observability costs up to 40%.
LLoadNinja
The only load testing tool to record, replay, and test in real browsers at scale.
L Locust
Write scalable load tests in plain Python 🚗💨.
WWebLOAD
Learn more about WebLOAD load testing tool by RadView.
LLoadium
Loadium is a performance and load testing tool that executes performance tests from open source tools, including JMeter, Gatling, and Selenium
L LoadView
A cloud-based load testing tool that allows you to create and execute performance tests for your web applications and APIs.
RRedLine13
RedLine13 gives you "almost" free load testing in the cloud.
LLoader.io
Free tool for web application load testing that allows for the simulation of concurrent connections to your web application's APIs.
T Taurus
Automation-friendly framework for Continuous Testing by.
AApache Benchmark
A command-line tool for measuring the performance of HTTP web servers, useful for testing the performance of your Apache installations.
S Siege
Siege is an http load tester and benchmarking utility.
V Vegeta
HTTP load testing tool and library.
T Tsung
A multi-protocol distributed load testing tool that can be used to stress test HTTP, WebDAV, SOAP, PostgreSQL, MySQL, and more.
O OWASP ZAP
The ZAP by Checkmarx Core project.
QQualys
Discover how Qualys helps your business measure & eliminate cyber threats through a host of cybersecurity detection & remediation tools.
BBurp Suite
PortSwigger offers tools for web application security, testing, & scanning.
RRoboHydra HTTP
RoboHydra Server is a great API testing solution for those who don’t have access to a server but need to test something.
NNessus
Find out more about Nessus - the trusted gold standard for vulnerability assessment, designed for modern attack surfaces - used by thousands of organizations.
A AppSpider
A dynamic application security testing tool with API security features.
LLeapwork
Unite Enterprise Playwright, AI test automation, and performance testing with the governance enterprises need to trust software delivery.
MMicro Focus Fortify
A suite of tools for application security, including API security testing.
HHttpMaster
Practical and easy-to-use software tool for testing HTTP applications and services.
KKatalon Studio TrueTest
Katalon True Platform is the AI testing platform for QA teams.
TTricentis Tosca
A continuous testing platform that supports scriptless test automation for web, mobile, API, and enterprise applications.
PParasoft SOAtest
Optimize API and web service testing with AI-enhanced SOAtest.
RRanorex Studio
Test automation for desktop, web, and mobile apps.
EEggplant Functional
A test automation tool that provides scriptless testing solutions for web, mobile, and desktop applications.
TTestComplete
Test Mobile, Web and Desktop applications.
AApplitools
Applitools is an AI-powered end-to-end testing platform that combines our proven Visual AI with the latest GenAI and no-code approaches to maximize your test coverage while…
SScriptless
A test automation platform that provides scriptless test creation for web applications.
UUFT One
A functional testing tool that supports scriptless test creation for web, mobile, API, and desktop applications.
ZZebrunner
Synchronize manual and test automation teams in one place.
AAutify
Autify's AI-powered Quality Engineering Platform provides AI-powered product and quality assurance professionals to streamline your software testing process and boost the…
TTestim
Testim is an automated testing platform for fast authoring of AI-powered stable tests and tools to help you scale quality.
FFunctionize
Builds, runs, and maintains tests against your live application.
MMabl
The #1 agentic testing platform empowering software teams to accelerate releases, ensure software quality, and deliver exceptional user experiences.
GGhost Inspector
Ghost Inspector is a no-code automated browser testing platform.
P ProdPerfect
Everyone plans to succeed.
TTestsigma
Agentic test automation that generates, runs, heals, and diagnoses tests then scores your release confidence.
TTestArchitect
Empower your team with TestArchitect: unified, no-code, AI-powered automation, API, and database testing.
ZZeuz
ZeuZ Test Studio is an AI test automation platform that writes, runs and repairs tests across web, mobile, desktop and API.
AAcunetix
Invicti Web + API is an end-to-end web security scanner that offers a 360 view of an organization’s security.
PParasoft SOAtest
Optimize API and web service testing with AI-enhanced SOAtest.
ZZato API Test
With Zato API Test, you can test APIs in plain English, without any programming
U Unirest
Unirest in Java: Simplified, lightweight HTTP client library.
CCurl
A command line tool and library for transferring data with URL syntax, supporting DICT, FILE, FTP, FTPS, GOPHER, GOPHERS, HTTP, HTTPS, IMAP, IMAPS, LDAP, LDAPS, MQTT, MQTTS,…
TTelerek TestStudio
API testing with Test Studio helps you enhance your end-to-end testing strategy to cover test scenarios that require API calls.
RRest-Assured
Java DSL for easy testing of REST services.
B BrowserStack
Instant access to 3500+ browsers and real iOS and Android devices for cross browser testing.
SSauce Labs
Test web and mobile apps on thousands of real devices, browsers, and emulators.
LLambdaTest
LambdaTest, now branded TestMu AI, is a cloud testing platform for web and mobile apps with browser and real-device clouds, HyperExecute orchestration, KaneAI test agents and AI-native test management.
AAWS Device Farm
AWS Device Farm is an application testing service that allows you to test iOS, Android, and web applications on real smartphones, tablets and desktop web browsers.
ZZephyr
Whether you’re Agile or Waterfall, or somewhere in-between, Zephyr test management solutions support development natively on Jira as well as securely on-premises.
TTestLodge
Simple test case management tool for creating and running test cases with reporting.
HHyperTest
HyperTest now describes itself as an AI code review tool powered by runtime execution, replaying real traces against branches to catch API breaks, race conditions and N+1 queries.
XXray
Bring QA and development together in Jira.
UUsetrace
Codeless testing platform for automating web application testing.
CCloudQA
Record, run and maintain end-to-end web tests without writing code.
RRainforest QA
Automate e2e tests without the time-consuming drudgery of test maintenance.
VVirtuoso
Virtuoso QA is an enterprise test automation platform that proves what it tested.
AAvo Assure
Avo Automation helps enterprises assure business-critical processes with Avo Assure - agentic AI, no-code test automation for SAP, Dynamics 365, Oracle, and Salesforce.
OOpkey
Codeless test automation for ERP applications with support for no-code workflows.
KKobiton
Codeless mobile app testing with real device cloud and AI-driven capabilities.
RReflect
SmartBear Reflect helps teams maintain application integrity with AI-powered, codeless web and mobile testing, so your app works the way it.
WWaldo
Codeless mobile app testing with AI-powered visual testing and reporting.
DDoesQA
Automated end-to-end testing for every web journey.
OOxygen
Oxygen is a powerful Selenium & Appium infrastructure for beginners and pros.
RReTest
retest makes GUI test automation software.
EEndTest
Endtest is the agentic AI platform for end-to-end test automation.
TTestRigor
Test automation tool - testRigor.
UUIlicious
Automate UI tests with UI-licious.
DDogQ
No-code test automation tool for end-to-end web tests.
PPreflight
PreFlight is a No-code web testing tool for anyone.
C ClicAutomate
ClicAutomate is built on a script-less test automation approach which expedites automation testing
TTestingWhiz
Experience effective test automation of web & mobile apps with an easy & intuitive codeless end-to-end software testing tool, TestingWhiz.
BBugBug
Cut regression time without growing your QA team.
B BrowserStack Low Code
Create AI-powered automated tests in minutes with our Low Code Automation.
PPingdom
A performance monitoring tool that provides insights into your website's speed, uptime, and user interactions.
BBitBar
Whether web, native, or hybrid, securely test your app across the real environments you need.
HHeadSpin
HeadSpin enables real device testing with AI-driven insights, KPI analysis, and seamless automation across 50+ locations for optimized app performance.
VVisual Studio App Center
Visual Studio App Center was Microsoft's mobile build, test, distribute and monitor service; it was retired on 31 March 2025, with Analytics and Diagnostics supported until the end of March 2027.
TTestGrid
TestGrid is an end-to-end testing solution powered by AI that simplifies and streamlines the testing process, helping businesses deliver high-quality digital experiences faster.
PPcloudy
Pcloudy is an AI-powered mobile app testing platform with 5,000+ real devices.
EEMAS by Alibaba Cloud
EMAS Mobile Testing was Alibaba Cloud's cloud device testing service; the product URL now redirects to EMAS HTTPDNS, so check Alibaba Cloud before relying on it.
T TestLink
Open-source test case management with test execution tracking and reporting capabilities.
PPractiTest
PractiTest is an AI-powered Test Management and QA Intelligence Platform that turns QA data into business answers.
K Kualitee
Test case management tool from $12/user with AI test generation, defect tracking, and Jira integration built in.
QQMetry
Accelerate releases with AI-powered test management.
AAqua
Transform QA with aqua cloud's AI-driven test management platform.
TTestiny
AI-ready test management tool for teams who want manual and automated testing in one system, their preferred AI assistant, and EU cloud or self-hosting.
Q Qase
Cloud-based test case management with test planning, execution, and defect tracking.
SSpiraTest
Manage your project's requirements, test cases and bugs.
TTestpad
Checklists-inspired test management for manual and exploratory testing, Agile-friendly.
RReQtest
Med Reqtest är det enkelt att lyckas med IT-projektet.
TTestMonitor
TestMonitor is a simple, intuitive test management software platform built for enterprise software, quality app development, and other important testing needs.
AApplause
Applause is a managed software testing services provider enabling enterprises to deliver high-quality apps, websites and AI experiences worldwide.
TTricentis qTest
Supports Agile and DevOps workflows, allowing centralized management of test cases.
BBugzilla Testopia
Testopia is a legacy test case management extension for Bugzilla; its latest versions target Bugzilla 4.x and it appears unmaintained.
IIBM Rational Quality Manager
IBM Rational Quality Manager is now IBM Engineering Test Management (ETM), a collaborative test management solution in IBM Engineering Lifecycle Management; version 7.2 was released in December 2025.
SSmartBear Test Management
Tool that includes test planning, test case management, and reporting tools.
HHelix TCM
Helix TCM was the test case management module of Perforce Helix ALM; Perforce now markets it as Perforce ALM, with requirements, test case and issue management in one place.
JJama Connect
Accelerate complex product development with an AI-powered engineering and requirements management platform that improves collaboration, traceability, quality, and compliance.
TTestmo
Modern test management software tool that fully integrates your test cases, test automation and exploratory testing, regardless of the tools you use.
CCucumberStudio
CucumberStudio gives your team the platform to succeed with BDD.
TTest Collab
Web-based test management tool with real-time reporting, JIRA integration, and REST API support.
K Klaros-Testmanagement
Klaros-Testmanagement is a web-based test management tool from verit; version 5.7.6 (December 2025) is its final maintenance release.
EEasyQA
This entry's website points to AIO Tests, an AI-powered test management app for Jira; the original EasyQA service no longer appears at its old domain.
TTyk
Open Source API and AI Gateway supporting REST, GraphQL, TCP, gRPC and MCP (Model Context Protocol).
VvRest
An effective online tool for automated REST API Testing.
AAPITest
A simple and extensible behavioural testing library for Go.
FFrisby
Frisby is a REST API testing framework built on Jest that makes testing API endpoints easy, fast, and fun.
R RestCase
RestCase supercharges the API development process resulting in improved team collaboration, reduced development time, better testing and increased overall productivity.
NNock
HTTP server mocking and expectations library for Node.js.
MMicrocks
Microcks is Open Source cloud-native tool for API Mocking and Testing.
TTestMace
Your IDE for working with an API.
AApickli
Test framework for behavior-driven API testing.
TTrafficParot
Mock API server and message broker for TDD and API Testing
IImposter
Scriptable, multipurpose mock server.
SStoplight Prism
Accelerate API development with realistic mock servers powered by API descriptions.
MMirageJS
A client-side server to build, test and share your JavaScript app.
HHoverfly
Lightweight service virtualization/ API simulation / API mocking tool for developers and testers.
Q QuickMocker
API mocking and request inspection tool for development and testing.
JJSON Server
Quickly mock a REST API with JSON files.
MMockLab
Platform for creating, testing, and sharing HTTP mock servers.
MMockoon
Mockoon is the easiest and quickest way to run mock APIs locally.
MMockServer
Open-source HTTP/1.1, HTTP/2, HTTP/3, HTTPS and gRPC mock server, recording proxy, and MCP server for AI assistants.
MMockAPI
MockAPI is a simple tool that lets you easily mock up APIs, generate custom data, and perform operations on it using RESTful interface.
MMetasploit
Find security issues, verify vulnerability mitigations & manage security assessments with Metasploit.
NNikto
Nikto web server scanner.
KKaneAI
KaneAI is TestMu AI's AI testing agent that turns natural-language instructions into end-to-end web and mobile tests, with auto-heal, code generation and cloud execution.
SSQLMap
Automatic SQL injection and database takeover tool.
WWfuzz
Wfuzz has been created to facilitate the task in web applications assessments and it is based on a simple concept: it replaces any reference to the FUZZ keyword by the value…
N Nmap
Nmap - the Network Mapper.
O OpenVAS
Framework for vulnerability scanning and management.
AAstra
Astra Security is a one of a kind AI powered automated Pentest Platform that makes chaotic pentests a breeze & continuous with its hacker-style vulnerability scanner.
KKali Linux
Home of Kali Linux, an Advanced Penetration Testing Linux distribution used for Penetration Testing, Ethical Hacking and network security assessments.
W Wapiti
Wapiti is a free and open-source web application vulnerability scanner (DAST).
A Aircrack-ng
WiFi security auditing tools suite.
VVeracode
Manage application security risks effectively with Veracode's Application Risk Management platform, built for today's AI-driven world.
SSnyk
Snyk CLI scans and monitors your projects for security vulnerabilities.
WWebInspect
Dynamic application security testing tool for identifying vulnerabilities in web applications.
IImmuniWeb
AI-driven platform for application security testing and monitoring.
IInvicti (formerly Netsparker)
Web vulnerability scanner for automated detection of security issues in web applications.
CCobalt Strike
Adversary simulation tool for red team operations and security assessments.
CCheckmarx
Checkmarx agentic application security software platform Combines Hybrid scanning, AI-powered agents, and unified risk intelligence across every attack surface.
DDetectify
Find what's exposed and fix what matters, before attackers do.
BBurp Collaborator
Burp Collaborator is a network service that enables you to detect invisible vulnerabilities.
BBlack Duck
Black Duck delivers True Scale Application Security — SAST, SCA, DAST, and AI-powered AppSec — to help security and development teams detect vulnerabilities, manage open…
AArachni
Web Application Security Scanner Framework.
SSonarQube
Modernize your AI workflows with code verification for the agentic era.
DDependency-Check
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
P Probely
Web vulnerability scanner designed for continuous security testing.
NNetsparker Cloud (Invicti)
Cloud-based security testing tool for automated web vulnerability scanning.
CCodeScan
AutoRabit CodeScan™ secures and optimizes your Salesforce DevOps pipeline by providing real-time static code analysis and continuous compliance.
CCodified Security
Security testing for mobile applications with continuous integration support.
BBeagle Security
The AI-powered AppSec platform that identifies vulnerabilities with comprehensive penetration tests and provides actionable remediation insights.
GGoogle Nogotofail
Security testing tool for networks, focusing on detecting traffic interception vulnerabilities.
P Paros Proxy
Reviews, ratings, and information about Paros proxy: web proxies, web vulnerability scanners,.
BBugzilla
The software solution designed to drive software development Bugzilla lets you plan, organize and release software on your own teams.
JJIRA
Jira brings teams together to reach the next level of productivity with AI agents that orchestrate, plan, and track projects at scale.
M MantisBT
Mantis Bug Tracker (MantisBT).
ZZoho Bug Tracker
Zoho BugTracker is an online bug tracker and issue tracking software that helps you to track and fix bugs quickly.
BBacklog
Backlog is the all-in-one SaaS for all your project management software needs.
RRedmine
Mirror of redmine code source - Official Subversion repository is at https://svn.redmine.org/redmine - contact: @vividtone or maeda (at) farend (dot) jp.
BBugHerd
BugHerd makes it easy for clients to give website feedback and bug reports.
MMarker
Collect website feedback and report website bugs to Jira, Trello, Asana, and GitHub directly from your site with our design feedback software.
RRetina CS (BeuyondTrust)
Network security assessment tool with centralized vulnerability management features.
MMonday
Get more work done with AI agents that work side by side with your people.
CClickUp
Our mission is to make the world more productive.
GGoogle PageSpeed Insights
A tool that analyzes the content of a web page and provides suggestions to make that page faster.
G GTmetrix
A website performance testing tool that provides insights into how well your site loads and offers actionable recommendations.
W WebPageTest
An open-source tool that allows you to run performance tests on your website using real browsers at real consumer connection speeds.
LLighthouse
Automated auditing, performance metrics, and best practices for the web.
Y YSlow
YSlow is Yahoo!'s classic rule-based web performance analyser; it is open source under BSD-3-Clause but has been inactive since 2023.
NNew Relic
New Relic is an AI-powered observability platform that correlates your telemetry across your entire stack, so you can isolate the root cause and reduce MTTR.
SSiteSpeed.io
sitespeed.io is an open-source tool for comprehensive web performance analysis, enabling you to test, monitor, and optimize your website’s speed using real browsers in various…
DDareBoost
Dareboost was a website speed test and monitoring service; it has been discontinued and replaced by Contentsquare's Speed Analysis.
UUptrends
Monitor web and API user journeys from 230+ ISP-based locations worldwide and feed outside-in synthetic insights into your open observability platform.
DDotcom-Monitor
Website monitoring that catches downtime before customers do.
SSucuri Load Time Tester
Sucuri Load Time Tester was a free multi-location site speed checker; it no longer appears to be available, and the page now promotes Sucuri's CDN.
KKeyCDN
Single asset performance test from multiple locations.
UUpzilla
Monitor website uptime, performance, availability monitoring and server uptime/downtime checks from multiple locations.
SSematext
IT system monitoring and management tools for DevOps who need 24x7 live visibility into their infrastructure.
MMonitis
Monitis was a cloud website and server monitoring service; its domain now redirects to TeamViewer Remote Management, and it is no longer offered as a standalone product.
DDebugBear
Monitor website performance and Google Core Web Vitals with synthetic tests and real user monitoring (RUM).
IInstana
IBM Instana Observability provides real‑time application insight that traces requests, detects issues across the full application stack and speeds problem resolution.
MMonkeyTest
MonkeyTest agents use your site like a real user to find bugs, report them, and verify them once fixed.
JJest
Jest is a free, open-source JavaScript test runner with zero-config defaults, mocks, and snapshot testing.
VVitest
Vitest is a free, open-source unit test runner that reuses a Vite project's config, transforms, and plugins.
P pytest
pytest is the usual Python test runner: plain asserts, fixtures, parametrization, and a large plugin set.
JJUnit 5
JUnit 5 is the current JUnit for Java and the JVM: Jupiter for new tests, Platform to launch them, Vintage to run JUnit 4.
MMaestro
Maestro is a YAML UI test runner for Android, iOS, and web. The CLI is free and open source; Maestro Cloud is paid.
PPercy
Percy is BrowserStack's visual testing service. SDKs upload screenshots from your tests; reviewers accept or reject the diff.
CChromatic
Chromatic publishes Storybook and snapshots UI for visual review. The capture service is paid after a free monthly snapshot allowance.
AAllure Report
Allure Report turns test results from many frameworks into one HTML report. The report tool is free and open source.
RReportPortal
ReportPortal is an open-source test-results server with live reporting, failure analysis, and dashboards. Hosted support is paid.
CCurrents
Currents is a paid CI dashboard for Playwright and a few other runners: traces, flake detection, and test orchestration.
Aaxe-core
axe-core is Deque's open-source accessibility rules engine. It checks rendered HTML and reports WCAG violations as JSON.
PPa11y
Pa11y is a free, open-source command-line accessibility checker. It opens a URL in a headless browser and reports rule failures.
CCucumber
Cucumber is the open-source BDD tool that runs Gherkin feature files against step definitions. It is not CucumberStudio.
TTestcontainers
Testcontainers starts throwaway Docker containers from tests so integration tests can use real databases, brokers, and browsers.
SSentry
Sentry groups application errors and traces them across services. The hosted product has a free developer plan and paid team plans.
DDatadog
Datadog is a commercial cloud platform for metrics, traces, logs, and security signals. Products are priced separately.
G Grafana
Grafana is an open-source dashboard for metrics, logs, and traces. Grafana Cloud adds a hosted stack with a free tier and paid plans.
OOpenTelemetry
OpenTelemetry is the open standard and toolkit for traces, metrics, and logs. It is free; you still need a backend to store the data.
PPromptfoo
Promptfoo is an open-source CLI for LLM evals and red teaming. The community tool is free; enterprise features are quoted.
DDeepEval
DeepEval is an open-source LLM evaluation library with pytest-style asserts. Confident AI is the optional paid cloud from the same team.
LLangfuse
Langfuse is an open-source platform for LLM traces, prompts, and evals. Self-hosting is free; Langfuse Cloud is paid after a hobby tier.
MMomentic
Momentic tests web, iOS, and Android. Describe a step in plain English and the agent performs it. Tests adapt to small UI changes on their own.
SSemgrep
Semgrep is a fast static-analysis engine with a free open-source CLI and a paid platform for cross-file rules, supply chain, and secrets.
LLaunchDarkly
LaunchDarkly is a commercial feature-flag and experimentation platform. A developer plan is free; production use is metered, not sold per seat.
FFirebase Test Lab
Firebase Test Lab runs Android and iOS tests on Google-hosted devices. It is deprecated and scheduled to shut down on 30 September 2027.
PPlaywright MCP
Playwright MCP is Microsoft's Model Context Protocol server for browser automation, using structured accessibility snapshots.
TTestSprite
TestSprite is an AI testing agent that generates, runs and heals tests against a live app, from a CLI, an IDE MCP server, CI or a dashboard.
QQA Wolf
QA Wolf is a platform of AI testing agents that write, run and maintain end-to-end tests on web, mobile and desktop, billed per run rather than per seat.
BBrowser Use
Browser Use is an open-source, MIT-licensed browser agent that can drive a real browser from natural-language tasks, with a hosted cloud billed by browser-hour rather than a subscription.
RRagas
Ragas is an open-source library for systematically evaluating LLM applications, including RAG systems and agents.
LLangSmith
LangSmith is LangChain's platform for observability and evaluation of LLM applications and agents, including offline and online evals.
CChecksum
Checksum is an AI QA engineer that writes Playwright tests as pull requests in your repo, runs them, and opens healing PRs when the product changes.
MMeticulous
Meticulous records real sessions of a web app and turns them into a self-maintaining suite of visual end-to-end tests that run on every pull request.
QQA.tech
QA.tech runs AI verification agents against a live web or mobile app on every pull request, mapping the app and checking the user journeys a change affects.
SSpur
Spur is an AI QA platform whose agents run exploratory, functional, localization and UI checks on web and native mobile apps, with a focus on e-commerce.
RRanger
Ranger gives coding agents a browser-based verifier: one command tests the feature an agent just built and returns a verdict with screenshots, recordings and traces.
BBug0
Bug0 is a managed AI QA service: a forward-deployed engineer builds self-healing Playwright tests on Bug0's open-source engine and verifies every failure, for a flat monthly fee.
TThunders
Thunders is an AI test-agent platform that builds, runs and maintains end-to-end tests across web, mobile, API, desktop and SAP, with AI personas and an MCP server.
SSkyvern
Skyvern is an AGPL-licensed AI browser-automation agent that completes workflows on any website using vision and LLMs, with a hosted cloud and a self-hostable Docker build.
SStagehand
Stagehand is Browserbase's MIT-licensed SDK for browser agents, mixing Playwright-style code with natural-language act, extract and observe calls and self-healing actions.
TTestDriver
TestDriver runs every pull request in a real desktop sandbox with a vision-based AI QA agent, finds bugs and builds regression tests, including for desktop apps and extensions.
AAlumnium
Alumnium is an MIT-licensed AI test harness: an MCP server for coding agents plus Java, Python and TypeScript libraries that add natural-language steps to Selenium, Playwright and Appium.
MMidscene.js
Midscene.js is an MIT-licensed, vision-driven GUI agent and E2E test framework for web, Android, iOS, HarmonyOS and desktop, with natural-language YAML or JavaScript tests.
AAskUI
AskUI is an agentic test-automation platform from Germany that drives desktop, web, mobile and HMI devices with vision AI, including air-gapped on-premise deployment.
MMobileBoost (GPT Driver)
MobileBoost, maker of GPT Driver, is a mobile test agent that turns pull requests into generated, executed and maintained iOS and Android end-to-end tests with results in CI.
RRevyl
Revyl is a mobile development platform with cloud iOS and Android simulators and AI-driven testing that verifies changes through real user flows from CLI, MCP, CI or API.
DDrizz
Drizz is a vision-AI mobile testing tool for iOS and Android: describe a flow in plain language, and Drizz writes, runs and debugs tests without selectors, billed per executed step.
AArbigent
Arbigent is an Apache-2.0 AI agent testing framework for Android, iOS and web that breaks complex tasks into dependent scenarios, with a UI and a code interface.
SSofy
Sofy is a no-code AI testing platform whose agents write, run and fix tests for mobile, web, SAP and Dynamics 365, with a real-device lab and AI failure analysis.
AAppvance AIQ
Appvance AIQ is an enterprise AI testing platform built on Playwright that generates tests from natural language, executes and governs them, and expands coverage beyond scripted paths.
WWopee.io
Wopee.io runs AI testing agents for web apps that explore, generate, execute, validate and maintain Playwright-friendly tests, with visual testing, an MCP server and self-hosting.
CCARBON by testers.ai
CARBON, from testers.ai, is an AI test-manager agent that lives in your coding agent: 12 free MIT-licensed testing commands, with a paid Pro tier of extra workflows.
CContextQA
ContextQA is an AI QA platform for web, mobile, API, SAP, Salesforce and AI agents that generates, runs and self-heals tests and exposes them to coding agents over MCP.
SShiplight AI
Shiplight AI is an agent-native testing platform: it installs into your coding agent as an MCP server and skills, walks your app in a real browser and writes readable, self-healing tests.
SShortest
Shortest is an MIT-licensed natural-language end-to-end testing framework from Antiwork, built on Playwright and executed by Anthropic's Claude.
VVibium
Vibium is an Apache-2.0 browser automation tool for AI agents, built on WebDriver BiDi, usable as an agent skill, an MCP server or a JS, Python or Java library.
DDiffblue
Diffblue's testing agent orchestrates AI coding tools to generate verified Java regression unit tests at project scale, priced per net new line of coverage; Cover has a Community Edition.
TTusk
Tusk is an AI testing platform that generates unit and API tests from production traffic and business context, self-heals them and reviews PRs as a verification layer for coding agents.
HHealenium
Healenium is an open-source, Apache-2.0 self-healing library for Selenium (with an Appium adapter) that replaces broken locators at runtime using a machine-learning matching algorithm.
EEvoMaster
EvoMaster is an LGPL-3.0 open-source tool that uses AI search techniques to generate system-level tests for REST, GraphQL and RPC APIs, in white-box and black-box modes.
KKushoAI
KushoAI generates API test suites from OpenAPI specs or Postman collections, checks every change against the contract, and adds continuous API security scanning and UI testing.
LLoadmill
Loadmill is an AI verification layer that uses vision-based agents to check AI-built software across UI, API, mobile and performance, with an MCP server for coding agents.
CCopado Robotic Testing
Copado Robotic Testing is a low-code, AI-powered test automation product from Copado, focused on Salesforce and other digital experiences and tied into Copado's DevOps platform.
GGiskard
Giskard offers an Apache-2.0 open-source library for evals, red teaming and test generation for AI agents, plus a commercial Hub for agent red-teaming, evaluation and guardrails.
Ggarak
garak is NVIDIA's Apache-2.0 LLM vulnerability scanner that probes models and dialog systems for hallucination, data leakage, prompt injection, toxicity, jailbreaks and more.
PPyRIT
PyRIT is Microsoft's MIT-licensed Python Risk Identification Tool for generative AI: automated scans, adaptive multi-turn attacks and human-led red teaming in one toolkit.
AArize Phoenix
Arize Phoenix is an open-source (Elastic License 2.0) AI observability and evaluation tool for tracing, evaluating and improving LLM apps and agents, with a hosted Arize AX tier.
BBraintrust
Braintrust is a hosted platform for AI evals and agent observability: trace production, turn patterns into evals, score releases, and query it from your IDE via MCP.
TTruLens
TruLens is an MIT-licensed, OpenTelemetry-native library for tracing and evaluating LLM apps and agents with explainable LLM judges, maintained by Snowflake.
IInspect
Inspect is the UK AI Security Institute's MIT-licensed framework for LLM evaluations, with datasets, solvers, scorers, agents, sandboxed tools and 200+ pre-built evals.
OOpik
Opik by Comet is an Apache-2.0 open-source platform to trace, evaluate and monitor LLM apps, RAG systems and agents, with test suites, LLM-as-judge evals and a free cloud tier.
LLangWatch
LangWatch is an Apache-2.0 open-source platform for agent observability, evals and agent simulation testing, with prompt management, red-teaming and voice-agent testing.
OOpenAI Evals
OpenAI Evals is an MIT-licensed framework and open registry for evaluating LLMs and LLM systems, now complemented by evals in the OpenAI Dashboard.
GGalileo
Galileo is an AI observability and eval engineering platform that builds datasets, tunes evaluation metrics and turns offline evals into production guardrails for AI apps and agents.
HHamming
Hamming tests, red-teams and monitors voice and chat AI agents: simulated calls before launch, failed calls rerun as regression tests, and production monitoring.
CCoval
Coval is a voice AI testing and evaluation platform that simulates conversations, observes production calls and adds human review to make voice agents deployment-ready.
CCekura
Cekura is automated QA for voice and chat AI agents: simulations, evaluations, red-teaming and production call monitoring, with a loop that turns failures into evals and fixes.
CChrome DevTools MCP
Chrome DevTools MCP is Google's Apache-2.0 MCP server and CLI that lets coding agents control and inspect a live Chrome: automation, network and console debugging, and performance traces.
MMobile MCP
Mobile MCP from Mobile Next is an Apache-2.0 MCP server that lets AI agents drive iOS and Android apps on simulators, emulators and real devices through accessibility snapshots or screenshots.
BBrowserStack MCP Server
BrowserStack's official AGPL-3.0 MCP server lets AI assistants manage test cases, run manual and automated tests on BrowserStack, and debug and fix code in plain English.
MMCP Selenium
MCP Selenium is an MIT-licensed MCP server for Selenium WebDriver, by Angie Jones, that lets AI agents automate Chrome, Firefox, Edge and Safari.
AAppium MCP
Appium MCP is the Appium project's Apache-2.0 MCP server for mobile automation, with AI-powered element finding, locator generation and test creation for Android and iOS.
LLighthouse CI
Lighthouse CI is Google Chrome's Apache-2.0 toolkit for running Lighthouse on every commit, asserting budgets, storing results and blocking performance, accessibility and SEO regressions.
BBenchmarkDotNet
BenchmarkDotNet is the MIT-licensed .NET library for turning methods into reliable, reproducible micro-benchmarks with statistical analysis, diagnosers and exportable reports.
Hhyperfine
hyperfine is an Apache-2.0 command-line benchmarking tool that runs shell commands repeatedly with warm-up, statistical analysis and exports, ideal for comparing CLIs and builds.
NNBomber
NBomber is a distributed load-testing framework for .NET: write scenarios in C# or F# for HTTP, WebSockets, AMQP, SQL or any protocol, with a free personal licence and paid business plans.
FFortio
Fortio is an Apache-2.0 Go load-testing library, CLI, echo server and web UI that runs at a fixed QPS and records latency histograms and percentiles; it began as Istio's load tester.
CCodeQL
CodeQL is GitHub's semantic code analysis engine: it builds a queryable database from source code and runs security queries (MIT-licensed standard library) to find vulnerabilities, powering GitHub code scanning.
TTrivy
Trivy is Aqua Security's Apache-2.0 all-in-one scanner for container images, filesystems, Git repos, VM images and Kubernetes, finding CVEs, IaC misconfigurations, secrets, licences and SBOM data.
TTruffleHog
TruffleHog is Truffle Security's AGPL-3.0 secrets scanner that discovers, classifies (800+ types), verifies and analyses leaked credentials in Git, chats, wikis, logs, object stores and filesystems.
CCheckov
Checkov is an Apache-2.0 static analysis tool for infrastructure as code (Terraform, CloudFormation, Kubernetes, Helm, Dockerfile and more) that also does SCA for images and open-source packages.
NNuclei
Nuclei is ProjectDiscovery's MIT-licensed, template-based vulnerability scanner: simple YAML templates, community-contributed checks, multi-protocol support and CI/CD use for regression testing.
OOSV-Scanner
OSV-Scanner is Google's Apache-2.0 dependency vulnerability scanner and official frontend to the OSV database, covering many languages, package managers, OS packages and containers, with guided remediation and licence checks.
OOWASP Dependency-Track
OWASP Dependency-Track is an Apache-2.0 SBOM-driven component analysis platform that tracks components across your portfolio and flags vulnerable, outdated or policy-violating dependencies.
AAFL++
AFL++ is the community-maintained successor to Google's AFL: a coverage-guided fuzzer with faster execution, better mutations and instrumentation, custom mutators and modes for binaries, licensed AGPL-3.0-or-later.
SSchemathesis
Schemathesis is an MIT-licensed property-based API testing tool that generates inputs from OpenAPI, GraphQL and gRPC schemas, chains stateful workflows and finds 500s, schema violations and validation gaps.
Mmitmproxy
mitmproxy is an MIT-licensed, interactive, TLS-capable intercepting proxy for HTTP/1, HTTP/2 and WebSockets, with console, command-line (mitmdump) and web (mitmweb) interfaces and Python addons.
PPrometheus
Prometheus is the CNCF's Apache-2.0 systems and service monitoring system: a multi-dimensional time-series database with PromQL, pull-based scraping, service discovery and alerting rules.
JJaeger
Jaeger is the CNCF's Apache-2.0 distributed tracing platform; v2 is built on the OpenTelemetry Collector and accepts OTLP traces, with a UI for searching traces and analysing service dependencies.
SSigNoz
SigNoz is an OpenTelemetry-native observability platform with logs, metrics, traces, alerts and dashboards in one place; open-source self-hosted, plus SigNoz Cloud with a 30-day trial and usage pricing from $49.
HHoneycomb
Honeycomb is an observability platform built on high-cardinality, event-based data and distributed tracing, with BubbleUp, SLOs, AI agents and MCP; free tier with 20M events a month and Pro from $150/month.
DDynatrace
Dynatrace is an AI-powered observability and security platform covering APM, infrastructure, logs, digital experience (real-user and synthetic), application security and AI observability, priced per host-hour.
CCheckly
Checkly is a monitoring-as-code platform for API checks, Playwright browser checks, uptime monitors, alerts and status pages, run from 20+ locations; Hobby $0, Starter $24/month, Team $64/month.
UUptime Kuma
Uptime Kuma is an MIT-licensed, easy-to-use self-hosted monitoring tool for HTTP(s), TCP, keyword, JSON query, WebSocket, ping, DNS, push and Docker monitors, with 90+ notification services and status pages.
CChaos Mesh
Chaos Mesh is a CNCF incubating, Apache-2.0 chaos engineering platform for Kubernetes that defines pod, network, DNS, HTTP, I/O, time, stress, kernel, JVM and cloud faults as custom resources.
LLitmusChaos
LitmusChaos is a 100% open-source CNCF chaos engineering platform that uses Kubernetes custom resources to define chaos and steady-state hypotheses, with a hub of experiments and a control-plane UI.
GGremlin
Gremlin is an enterprise reliability management and resilience testing platform with fault injection, reliability scoring, dependency discovery and Foresight AI agents; custom quotes and a 30-day free trial.
Hhey
hey is a tiny Apache-2.0 HTTP load generator written in Go, originally called boom, used as a simple replacement for ApacheBench (ab).
Ooha
oha is an MIT-licensed Rust HTTP load generator inspired by hey, with a real-time terminal UI showing progress, latency and status codes as the test runs.
Bbombardier
bombardier is a fast, cross-platform MIT-licensed HTTP(S) benchmarking tool in Go that uses fasthttp, with an optional net/http client for HTTP/2.
Aautocannon
autocannon is an MIT-licensed HTTP/1.1 benchmarking tool written in Node.js, inspired by wrk and wrk2, with HTTP pipelining, HTTPS support and a programmatic API.
GGoose
Goose is an Apache-2.0 load-testing framework written in Rust and inspired by Locust, from Tag1 Consulting, for simple to complex user-behaviour load tests.
DDrill
Drill is a GPL-3.0 HTTP load-testing application written in Rust, with benchmark plans described in Ansible-inspired YAML files.
Gghz
ghz is an Apache-2.0 gRPC benchmarking and load-testing tool with a CLI, Go library and optional web app for storing and comparing results.
PPlow
Plow is an Apache-2.0 HTTP(S) benchmarking tool in Go using fasthttp, showing real-time statistics, histograms and percentiles in both a web UI and the terminal.
HHyperfoil
Hyperfoil is an Apache-2.0, microservice-oriented distributed benchmark framework in Java that is designed to avoid the coordinated-omission fallacy in latency measurement.
YYandex.Tank
Yandex.Tank is an Apache-2.0 extensible load-testing tool for Linux that drives generators such as phantom, JMeter and Python-based BFG, built for automated load-testing suites.
JJMH
JMH (Java Microbenchmark Harness) is OpenJDK's GPL-2.0 harness for building, running and analysing nano, micro, milli and macro benchmarks in Java and other JVM languages.
UUnlighthouse
Unlighthouse is an MIT-licensed tool that runs Google Lighthouse across your entire site, crawling pages and showing scores in a local UI, via CLI or CI integrations.
DDistributed Load Testing on AWS
Distributed Load Testing on AWS is an Apache-2.0 AWS Solutions implementation that runs load tests at scale on Amazon ECS on AWS Fargate, simulating thousands of users without managing servers.
AAzure App Testing (Azure Load Testing)
Azure App Testing is Microsoft's managed testing service that brings Azure Load Testing (JMeter and Locust at cloud scale) together with Playwright Workspaces for end-to-end browser testing.
SSpeedCurve
SpeedCurve (now SpeedCurve by Embrace) is a web performance monitoring service combining synthetic testing and real-user monitoring (RUM), with plans from $90 a month.
BBandit
Bandit is the PyCQA's Apache-2.0 tool for finding common security issues in Python code by building an AST for each file and running security plugins against it.
B Brakeman
Brakeman is a static analysis security vulnerability scanner for Ruby on Rails applications, run from the command line without needing the app to be running.
Ggosec
gosec is an Apache-2.0 Go security checker that inspects source code for security problems by scanning the Go AST and SSA representation.
FFind Security Bugs
Find Security Bugs is the LGPL-3.0 SpotBugs plugin for security audits of Java web and Android applications, also working with Kotlin, Groovy and Scala projects.
BBearer CLI
Bearer CLI is a SAST tool that scans source code and analyses data flows to find, filter and prioritise security and privacy risks, with a commercial Bearer Pro from Cycode.
OOpengrep
Opengrep is an LGPL-2.1 open-source SAST engine, a fork of Semgrep backed by a consortium of AppSec companies including Aikido, Endor Labs and others.
JJoern
Joern is an Apache-2.0 code analysis platform that builds code property graphs for C/C++, Java, JavaScript, Python, Kotlin, binaries and more, queried with a Scala-based DSL.
GGrype
Grype is Anchore's Apache-2.0 vulnerability scanner for container images, filesystems and SBOMs, covering major OS package ecosystems and language packages.
SSyft
Syft is Anchore's Apache-2.0 CLI and Go library for generating Software Bills of Materials (SBOMs) from container images, filesystems and archives, in CycloneDX, SPDX and other formats.
DDependabot
Dependabot is GitHub's automated dependency update service; its MIT-licensed core logic opens pull requests to update vulnerable and outdated dependencies across many ecosystems.
Ppip-audit
pip-audit is an Apache-2.0 PyPA tool that audits Python environments, requirements files and dependency trees for known vulnerabilities using the Python Packaging Advisory Database, and can fix them.
RRetire.js
Retire.js is an Apache-2.0 scanner that detects JavaScript libraries with known vulnerabilities in web apps and Node.js projects, and can generate an SBOM of the libraries it finds.
Ggovulncheck
govulncheck is the Go team's BSD-licensed vulnerability scanner that reports known vulnerabilities from the Go vulnerability database only when your code actually calls the affected functions.
GGitleaks
Gitleaks is an MIT-licensed tool for detecting secrets such as passwords, API keys and tokens in Git repositories, files and stdin; it is now feature complete with security-patch-only releases.
Ddetect-secrets
detect-secrets is Yelp's Apache-2.0, enterprise-friendly module for preventing new secrets entering a codebase, detecting committed secrets and tracking them with a baseline file.
TTalisman
Talisman is ThoughtWorks' MIT-licensed pre-commit and pre-push hook that inspects outgoing changesets for suspicious content such as tokens, passwords and private keys.
KKingfisher
Kingfisher is MongoDB's Apache-2.0 secret scanner and credential response tool in Rust: it detects leaked secrets with hundreds of rules, validates live credentials and maps blast radius.
KKICS
KICS (Keeping Infrastructure as Code Secure) is Checkmarx's Apache-2.0 open-source scanner for security vulnerabilities, compliance issues and misconfigurations in infrastructure-as-code.
CClair
Clair is an Apache-2.0 open-source project from Quay for static vulnerability analysis of application containers (OCI and Docker images), exposed through an API.
HHadolint
Hadolint is a GPL-3.0 Dockerfile linter written in Haskell that checks best practices and validates inline bash in RUN instructions using ShellCheck.
DDockle
Dockle is an Apache-2.0 container image linter for security that checks built images against best practices and CIS Docker Benchmark items.
Kkube-bench
kube-bench is Aqua Security's Apache-2.0 tool that checks whether Kubernetes is deployed according to the CIS Kubernetes Benchmark.
KKubescape
Kubescape is an Apache-2.0 Kubernetes security platform for IDEs, CI/CD and clusters, with risk analysis, compliance frameworks, misconfiguration and vulnerability scanning.
FFalco
Falco is the CNCF's Apache-2.0 cloud-native runtime security tool that detects abnormal behaviour in hosts, containers and Kubernetes using system calls and rules.
PProwler
Prowler is an Apache-2.0 open-source cloud security platform that automates security and compliance checks across AWS, Azure, GCP, Kubernetes and more, with a CLI and local server.
PPolaris
Polaris is Fairwinds' Apache-2.0 tool that validates Kubernetes workloads against best practices as a dashboard, admission controller or CLI.
KKubeLinter
KubeLinter is StackRox's Apache-2.0 static analysis tool that checks Kubernetes YAML files and Helm charts against best practices for security and production readiness.
Fffuf
ffuf is a fast, MIT-licensed web fuzzer written in Go for content discovery, virtual host discovery and parameter fuzzing during authorised security testing.
GGobuster
Gobuster is an Apache-2.0 Go tool for brute-forcing directories and files, DNS subdomains, virtual hosts and cloud buckets during authorised testing.
OOWASP Amass
OWASP Amass is an Apache-2.0 tool for in-depth attack surface mapping and external asset discovery using open-source intelligence and active techniques.
AAkto
Akto is an MIT-licensed security platform that began in API security testing and now positions itself as security for AI agents, MCP servers and LLMs.
RRESTler
RESTler is Microsoft Research's MIT-licensed stateful REST API fuzzer that infers dependencies from an OpenAPI spec and exercises cloud services to find security and reliability bugs.
CCATS
CATS is Endava's Apache-2.0 REST API fuzzer and negative-testing tool that generates, runs and reports tests for OpenAPI endpoints with no coding.
OOSS-Fuzz
OSS-Fuzz is Google's free continuous fuzzing service for critical open-source projects, running libFuzzer, AFL++ and other engines at scale on ClusterFuzz.
Hhonggfuzz
honggfuzz is Google's Apache-2.0 security-oriented fuzzer with evolutionary, feedback-driven fuzzing based on software and hardware code coverage.
JJazzer
Jazzer is Code Intelligence's Apache-2.0 coverage-guided, in-process fuzzer for the JVM, based on libFuzzer, with JUnit integration and bug detectors.
AAtheris
Atheris is Google's Apache-2.0 coverage-guided Python fuzzing engine, based on libFuzzer, for Python code and CPython native extensions.
Bboofuzz
boofuzz is a GPL-2.0 network protocol fuzzing framework in Python, a fork and successor of the Sulley fuzzing framework.
GGitHub Advanced Security
GitHub Advanced Security is GitHub's built-in, AI-powered application security suite: code scanning with CodeQL, secret scanning and push protection, dependency review and Copilot Autofix.
GGitGuardian
GitGuardian is a credential-layer security platform for secrets detection and remediation across code, CI and collaboration tools, available as SaaS or self-hosted, with a free plan.
SStackHawk
StackHawk is a developer-focused application security testing platform, now positioned as an AI coding agent security platform that finds, fixes and verifies exploitable vulnerabilities; plans from $10 per user per month.
SSocket
Socket is a software supply-chain security platform that blocks zero-day supply chain attacks in JavaScript, Python and Go dependencies by analysing package behaviour, with a free plan.
AAikido Security
Aikido Security is an all-in-one developer security platform covering SAST, SCA, secrets, IaC, containers, cloud posture, DAST and runtime protection, with a free Developer plan.
WWiz
Wiz is a cloud security platform that connects code, cloud and runtime into one agentic cybersecurity platform covering posture, vulnerabilities, identities, data and AI security.
DDocker Scout
Docker Scout is Docker's software supply-chain tool that analyses container images, builds SBOMs and gives near real-time, actionable insights and policy checks before images reach production.
442Crunch
42Crunch is an API security platform known for OpenAPI audit, conformance scanning and API protection, now positioned as an AI security platform for MCP servers used by AI agents.
MMayhem Security
Mayhem is an automated code and API security testing platform that uses fuzzing and AI to generate thousands of tests and report actionable, reproducible findings.
IIntruder
Intruder is an exposure-management platform for lean security teams, combining vulnerability management, attack surface monitoring and cloud security, with a free trial.
MMend.io
Mend.io is an application security platform covering SCA, SAST, container and AI security, positioned as unifying AppSec and AI security.
EEndor Labs
Endor Labs is an agentic application security platform for AI-generated and human-written code, covering SCA with reachability, SAST, secrets and container scanning to prioritise real risk.
FFOSSA
FOSSA is a software supply-chain platform for SBOM generation, software composition analysis, open-source licence compliance and vulnerability management, with a free plan.
ZZipkin
Zipkin is an Apache-2.0 distributed tracing system that gathers timing data to troubleshoot latency problems in service architectures, with a UI for finding and viewing traces.
GGrafana Tempo
Grafana Tempo is an AGPL-3.0, high-volume, minimal-dependency distributed tracing backend that stores traces in object storage and integrates with Grafana, Prometheus and Loki.
GGrafana Loki
Grafana Loki is an AGPL-3.0 log aggregation system, "like Prometheus, but for logs", that indexes labels rather than full text to keep costs low.
GGrafana Mimir
Grafana Mimir is an AGPL-3.0 horizontally scalable, highly available, multi-tenant, long-term storage system for Prometheus metrics.
GGrafana Pyroscope
Grafana Pyroscope is an AGPL-3.0 continuous profiling platform that helps debug performance issues down to a single line of code.
UUptrace
Uptrace is an AGPL-3.0 open-source APM built on OpenTelemetry for traces, metrics and logs, storing data in ClickHouse, with self-hosted and cloud options.
GGatus
Gatus is an Apache-2.0 developer-oriented health dashboard and status page that monitors HTTP, ICMP, TCP and DNS endpoints with condition-based checks and alerting.
ZZabbix
Zabbix is an AGPL-3.0 enterprise-class monitoring platform for networks, servers, VMs, applications and cloud, with agents, templates, alerting and dashboards.
NNetdata
Netdata is a GPL-3.0 real-time monitoring agent with per-second metrics, auto-discovery, ML-based anomaly detection and zero-configuration dashboards, plus Netdata Cloud.
VVictoriaMetrics
VictoriaMetrics is an Apache-2.0 fast, cost-effective monitoring solution and time-series database compatible with Prometheus, available single-node or clustered.
OOpenObserve
OpenObserve is an AGPL-3.0 observability platform for logs, metrics, traces, RUM, session replay, pipelines, SLOs and LLM observability, deployed as a single binary.
FFluent Bit
Fluent Bit is a CNCF, Apache-2.0 fast and lightweight processor for logs, metrics and traces on Linux, BSD, macOS and Windows, used widely as a Kubernetes log shipper.
VVector
Vector is an MPL-2.0 high-performance observability data pipeline from Datadog for collecting, transforming and routing logs and metrics, written in Rust.
PPixie
Pixie is an Apache-2.0 CNCF project for instant, Kubernetes-native application observability using eBPF to capture telemetry without code changes.
CCoroot
Coroot is an Apache-2.0 observability and APM tool with AI-powered root cause analysis, combining eBPF metrics, logs, traces, continuous profiling and SLO-based alerting with predefined dashboards.
PParca
Parca is an Apache-2.0 continuous profiling project that analyses CPU and memory usage down to the line number over time, using an eBPF agent.
NNagios Core
Nagios Core is the GPL-2.0 open-source monitoring engine behind Nagios, checking hosts and services with plugins and alerting when problems occur.
CChaos Toolkit
Chaos Toolkit is an Apache-2.0 open-source chaos engineering toolkit and orchestration framework for developers, with declarative experiments and extensions for clouds and platforms.
TToxiproxy
Toxiproxy is Shopify's MIT-licensed TCP proxy for simulating network and system conditions such as latency, timeouts and bandwidth limits in chaos and resiliency testing.
PPumba
Pumba is an Apache-2.0 chaos testing, network emulation and stress testing tool for Docker containers, able to kill, pause and stop containers and add network delays or packet loss.
KKrkn
Krkn is an Apache-2.0 CNCF sandbox chaos and resiliency testing tool for Kubernetes, focused on improving performance under failure conditions.
BBetter Stack
Better Stack combines uptime monitoring, incident management, status pages, logs and observability in one platform, free for personal projects and paid from $29 a month.
UUptimeRobot
UptimeRobot is a widely used uptime monitoring service for websites, APIs, ports, keywords and SSL, with a free plan and paid Solo, Team and Scale plans.
SSteadybit
Steadybit is a chaos engineering and reliability platform with a 30-day free trial and an open-source Reliability Hub of 200+ actions for injecting faults and verifying resilience.
AAWS Fault Injection Service
AWS Fault Injection Service (FIS) is a managed chaos engineering service for running fault-injection experiments on AWS workloads, priced at $0.10 per action-minute.
AAzure Chaos Studio
Azure Chaos Studio is Microsoft's managed chaos engineering service for injecting faults into Azure resources, run from the portal or by an AI agent.
RRollbar
Rollbar is an error monitoring service that groups exceptions, tracks deploys and alerts teams in real time, with a free plan including 5,000 occurrences.
HHoneybadger
Honeybadger is an application monitoring service for error tracking, uptime and cron monitoring and logs, with a free Developer plan and Team from $26 a month.
CCoralogix
Coralogix is an observability platform for logs, metrics, traces and security data that stores data in your own cloud bucket, priced per GB by data type.
CCatchpoint
Catchpoint is an Internet Performance Monitoring (IPM) platform for synthetic monitoring, real-user monitoring, network and BGP visibility from a large global agent network.
MMocha
Mocha is a long-running, MIT-licensed JavaScript test framework for Node.js and browsers, with BDD and TDD interfaces, async support, hooks, parallel mode and a large reporter ecosystem.
TTesting Library
Testing Library is a family of MIT-licensed packages (DOM, React, Vue, Angular, Svelte, user-event and more) for testing UI the way users use it, querying by role, label and text instead of implementation details.
MMock Service Worker (MSW)
Mock Service Worker (MSW) is an MIT-licensed API mocking library that intercepts network requests at the network level in browsers (via a Service Worker) and Node.js, for REST, GraphQL and WebSocket APIs.
HHypothesis
Hypothesis is the MPL-2.0 property-based testing library for Python: describe the range of inputs, let it generate cases including edge cases, and get the simplest failing example when a property breaks.
TTestNG
TestNG is an Apache-2.0 testing framework for Java, inspired by JUnit and NUnit, with annotations, groups, dependencies, data providers, parallel execution and XML suite configuration; it requires Java 11+.
MMockito
Mockito is the MIT-licensed, most popular mocking framework for Java, used to create mocks, stubs and spies with a clean API; Mockito 5 uses the inline mock maker by default and requires Java 11.
JJaCoCo
JaCoCo is a free Java code coverage library under the Eclipse Public License 2.0, measuring instruction, branch, line, method and class coverage via a Java agent, with Maven, Gradle, Ant and CLI integrations.
PPIT (Pitest)
PIT (Pitest) is an Apache-2.0 state-of-the-art mutation testing system for Java and the JVM that mutates bytecode to measure how well your tests detect faults, with Maven and Gradle plugins and HTML reports.
XxUnit.net
xUnit.net is a free, Apache-2.0, community-focused unit testing tool for C#, F# and Visual Basic, part of the .NET Foundation; v3 supports .NET 8+ and .NET Framework 4.7.2+.
NNUnit
NUnit is an MIT-licensed unit-testing framework for all .NET languages on Windows, macOS and Linux, broad and non-opinionated, now at version 5 after NUnit 3 and 4.
RRSpec
RSpec is the MIT-licensed behaviour-driven testing framework for Ruby, made up of rspec-core, rspec-expectations and rspec-mocks, and widely used with Rails via rspec-rails.
PPHPUnit
PHPUnit is the BSD-3-Clause, programmer-oriented testing framework for PHP and an instance of the xUnit architecture, created by Sebastian Bergmann and distributed as a PHAR or via Composer.
GGoogleTest
GoogleTest is Google's BSD-3-Clause C++ test framework, merged with GoogleMock, providing xUnit-style tests, rich assertions, death tests, parameterised and typed tests, and C++ mocking.
CCatch2
Catch2 is a BSL-1.0 C++ unit testing framework with natural assertions, free-form test names, sections for shared setup, BDD-style macros and built-in micro-benchmarking.
SStrykerJS
StrykerJS is the Apache-2.0 mutation testing framework for JavaScript and TypeScript, part of the Stryker Mutator family (with Stryker.NET and Stryker4s), supporting Jest, Vitest, Mocha, Karma and more.
Ccargo-nextest
cargo-nextest is an Apache-2.0 next-generation test runner for Rust, up to 3x faster than cargo test per its site, with per-test process isolation, retries, partitioning, JUnit output and a filterset DSL.
PPest
Pest is an MIT-licensed PHP testing framework built on PHPUnit with an expressive, closure-based API; Pest 5 (PHP 8.4+, PHPUnit 13) adds the Tia engine, an agent plugin, evals, PHPStan and Rector support.
Ffast-check
fast-check is an MIT-licensed property-based testing framework for JavaScript and TypeScript, with rich arbitraries, shrinking, replayable seeds, model-based testing and race-condition detection.
AAccessibility Insights
Accessibility Insights is Microsoft's free, open-source (MIT) accessibility testing suite: a Chrome and Edge extension with FastPass and a WCAG 2.1 AA Assessment, plus a Windows app for UI Automation inspection.
WWAVE
WAVE from WebAIM is a suite of web accessibility evaluation tools: a free online checker and Chrome, Firefox and Edge extensions, plus a paid credit-based API and a licensable stand-alone API and testing engine for CI.
Aaxe DevTools
axe DevTools from Deque is a commercial accessibility testing suite for web and mobile, built on axe-core, with a free and Pro browser extension, intelligent guided tests, a linter, CI/CD integrations and an Axe MCP Server.
IIBM Equal Access Accessibility Checker
IBM's Equal Access Accessibility Checker is an Apache-2.0 toolkit of browser extensions and Node packages (accessibility-checker, cypress-accessibility-checker) for automated accessibility testing with baselines and configurable policies.
PPatrol
Patrol is LeanCode's Apache-2.0, Flutter-first E2E UI testing framework that extends integration_test with native automation (permissions, notifications, WebViews, device settings), custom finders, test isolation and sharding.
RRobolectric
Robolectric is an MIT-licensed Android unit testing framework that runs tests in a simulated Android environment inside the JVM, routinely 10x faster than cold-started emulators, supporting 14 Android versions from API 24 to 37.
KKaspresso
Kaspresso is Kaspersky's Apache-2.0 Android UI testing framework built on Espresso and UI Automator, adding flaky-test protection, a Kotlin DSL, Compose support, ADB access, detailed reports, Allure and Robolectric support.
JJasmine
Jasmine is a long-established, MIT-licensed behaviour-driven JavaScript testing framework for browsers and Node.js, with built-in assertions, spies and asynchronous support and no required dependencies.
AAVA
AVA is an MIT-licensed Node.js test runner that runs test files concurrently in separate worker processes, with a minimal API, clean output, built-in assertions and snapshot support.
Nnode-tap
node-tap (the `tap` package from tapjs) is a full-featured Node.js test framework built on the Test Anything Protocol, with TypeScript support, built-in coverage, snapshots, mocking and a plugin system.
NNode.js Test Runner (node:test)
The Node.js test runner is the built-in `node:test` module, stable since Node.js 20, providing describe/it tests, mocking, snapshots, coverage and reporters with no extra dependencies.
BBun Test Runner
bun test is Bun's fast, built-in, Jest-compatible test runner with TypeScript and JSX support, lifecycle hooks, mocks, snapshots, DOM testing, coverage, watch mode and GitHub Actions annotations.
DDeno Test
deno test is Deno's built-in test runner, with Deno.test, test steps, hooks, filtering, sanitizers, mocking and snapshots via the standard library, coverage, documentation tests and affected-test selection.
SSinon.JS
Sinon.JS is a BSD-3-Clause library of standalone test spies, stubs and mocks for JavaScript, plus fake timers and fake XHR/servers, and works with any test framework.
CChai
Chai is an MIT-licensed BDD/TDD assertion library for Node.js and browsers, offering expect, should and assert styles and a large plugin ecosystem, pairing with any test framework.
Cc8
c8 is an ISC-licensed code coverage tool for Node.js that uses V8's built-in coverage instead of instrumentation, producing Istanbul-compatible reports for any test runner.
Nnyc (Istanbul)
nyc is the ISC-licensed command-line interface for Istanbul, the long-standing JavaScript code coverage tool that instruments code to report line, branch, function and statement coverage.
CCoverage.py
Coverage.py is the standard Apache-2.0 code coverage tool for Python, measuring line and branch coverage and producing terminal, HTML, XML, JSON and LCOV reports; pytest-cov builds on it.
Ttox
tox is an MIT-licensed command-line test automation tool for Python that creates isolated environments to run tests across Python versions and dependency sets, locally and in CI.
NNox
Nox is an Apache-2.0 Python test automation tool that defines sessions in a Python file (noxfile.py), running tests across interpreters and dependency sets in isolated environments.
Mmutmut
mutmut is a BSD-3-Clause mutation testing tool for Python that changes your code in small ways and reports which mutants your tests fail to kill, with a terminal UI for browsing results.
Ffactory_boy
factory_boy is an MIT-licensed test fixtures replacement for Python, inspired by thoughtbot's factory_bot, that builds test objects and ORM records for Django, SQLAlchemy and MongoEngine with Faker integration.
Bbehave
behave is a BSD-licensed behaviour-driven development framework for Python that runs Gherkin feature files with step definitions written in Python.
Rresponses
responses is an Apache-2.0 Python library from Sentry for mocking the Requests HTTP library, letting tests register fake responses, match request details and assert on calls.
VVCR.py
VCR.py is an MIT-licensed Python library, ported from Ruby's VCR, that records HTTP interactions to cassette files and replays them in later test runs for fast, deterministic, offline tests.
Ppytest-bdd
pytest-bdd is an MIT-licensed BDD plugin for pytest that runs Gherkin feature files as pytest tests, with steps implemented as fixtures-aware Python functions.
PPython unittest
unittest is Python's built-in xUnit-style testing framework, with TestCase classes, fixtures, test discovery, subtests, async test cases and the unittest.mock library, available in every Python install.
AAssertJ
AssertJ is an Apache-2.0 fluent assertions library for Java, with rich, discoverable assertions for core types, collections, exceptions, dates and more, plus soft assertions and custom assertion generation.
SSpock Framework
Spock is an Apache-2.0 BDD-style testing and specification framework for Java and Groovy applications, with given/when/then blocks, powerful data-driven tests and built-in mocking, running on the JUnit Platform.
KKotest
Kotest is an Apache-2.0 Kotlin multiplatform test framework with multiple testing styles, a large assertions library and built-in property-based testing.
MMockK
MockK is an Apache-2.0 mocking library built for Kotlin, supporting final classes, objects, coroutines, extension functions and top-level functions with a concise DSL.
Jjqwik
jqwik is an EPL-2.0 property-based testing engine for the JUnit Platform, letting Java and Kotlin developers write properties with generated, shrinking inputs alongside regular JUnit 5 tests.
AArchUnit
ArchUnit is an Apache-2.0 Java library for checking architecture rules (layers, dependencies, cycles, naming) as ordinary unit tests with any plain Java unit testing framework.
AAwaitility
Awaitility is an Apache-2.0 Java DSL for testing asynchronous systems, letting tests wait declaratively until a condition is met instead of using sleeps.
SSerenity BDD
Serenity BDD is an Apache-2.0 Java library for writing automated acceptance tests with rich living-documentation reports, integrating with JUnit, Cucumber and Selenium and supporting the Screenplay pattern.
MMSTest
MSTest is Microsoft's MIT-licensed test framework for .NET, developed in the microsoft/testfx repository alongside Microsoft.Testing.Platform, a lightweight alternative to VSTest, with the MSTest.Sdk project SDK.
MMoq
Moq is a popular MIT-licensed mocking library for .NET that uses lambda expressions to set up and verify mocks; stable v4.x is maintained on the v4 branch while the main branch hosts the upcoming v5.
NNSubstitute
NSubstitute is a BSD-3-Clause mocking library for .NET with a concise, readable syntax for creating substitutes, configuring returns and checking received calls.
FFluent Assertions
Fluent Assertions is a .NET assertions library with natural-language `Should()` syntax; versions 8 and later are free for open-source and non-commercial use but require a paid licence (via Xceed) for commercial use.
SShouldly
Shouldly is a BSD-3-Clause .NET assertion library focused on readable code and great failure messages that include the source expression being tested.
CCoverlet
Coverlet is an MIT-licensed cross-platform code coverage framework for .NET, with line, branch and method coverage, available as a VSTest collector, MSBuild integration or global tool.
SStryker.NET
Stryker.NET is the Apache-2.0 mutation testing tool for C# and .NET from the Stryker Mutator project, run as the dotnet-stryker global tool with HTML reports, a dashboard and incremental runs.
RReqnroll
Reqnroll is a BSD-3-Clause .NET port of Cucumber based on the SpecFlow code base, running Gherkin scenarios with MSTest, NUnit, xUnit or TUnit on .NET Framework 4.6.2+ through .NET 10.
FFsCheck
FsCheck is a BSD-3-Clause property-based testing library for .NET, a QuickCheck port written in F# and usable from C#, with xUnit and NUnit integrations.
GGo testing package
Go's built-in testing package and go test command provide unit tests, table-driven subtests, benchmarks, fuzzing, examples and coverage with no third-party dependencies.
TTestify
Testify is an MIT-licensed Go toolkit with assert and require assertion packages, mock objects and test suites, the most widely used testing library in the Go ecosystem.
GGoMock (uber-go/mock)
GoMock is an Apache-2.0 mocking framework for Go, maintained by Uber after the original golang/mock was archived, with the mockgen code generator and a gomock controller for expectations.
GGinkgo
Ginkgo is an MIT-licensed BDD-style testing framework for Go with Describe/Context/It specs, parallel execution, focused and labelled specs and rich reporting, usually paired with the Gomega matcher library.
GGomega
Gomega is an MIT-licensed matcher and assertion library for Go, designed for Ginkgo but usable with plain go test, with asynchronous Eventually/Consistently assertions.
RRapid
Rapid is an MPL-2.0 property-based testing library for Go, inspired by Hypothesis, with automatic shrinking, state machine testing and integration with go test.
Pproptest
proptest is a Hypothesis-inspired property-based testing framework for Rust, with composable strategies, automatic shrinking and persisted regression files.
MMockall
Mockall is a powerful mock object library for Rust, generating mocks for traits and structs with the #[automock] attribute or mock! macro, with expectations, predicates and call counts.
Iinsta
insta is an Apache-2.0 snapshot testing library for Rust by Armin Ronacher, with assert_snapshot! macros, serde-based formats, redactions, inline snapshots and the cargo insta review tool.
Ccargo-mutants
cargo-mutants is an MIT-licensed mutation testing tool for Rust that injects bugs into your code and reports which ones your tests miss, with nextest support, sharding and diff-based runs.
Ccargo-tarpaulin
cargo-tarpaulin is an Apache-2.0 code coverage tool for Rust projects, with ptrace and LLVM engines and HTML, LCOV, Cobertura XML and JSON reports plus Coveralls and Codecov support.
Ccargo-llvm-cov
cargo-llvm-cov is a cargo subcommand (Apache-2.0 or MIT) for LLVM source-based code coverage in Rust, supporting cargo test, cargo run and cargo nextest with precise line and region coverage.
Rrstest
rstest is an Apache-2.0 fixture-based and parameterised testing framework for Rust, offering pytest-style fixtures, #[case] tables, value matrices and async support on top of cargo test.
MMinitest
Minitest is an MIT-licensed, fast and lightweight Ruby testing library providing xUnit-style tests, a spec DSL and benchmarks; it is the default testing framework in Ruby on Rails.
SSimpleCov
SimpleCov is an MIT-licensed code coverage analysis tool for Ruby, built on Ruby's Coverage module, with HTML reports, branch coverage, groups, filters and minimum coverage thresholds.
Ffactory_bot
factory_bot is thoughtbot's MIT-licensed Ruby library for setting up test data with factories, sequences, traits and associations, used with RSpec, Minitest and Rails via factory_bot_rails.
VVCR (Ruby)
VCR is a Ruby library that records your test suite's HTTP interactions to cassettes and replays them in future runs for fast, deterministic, accurate tests; it uses the Hippocratic License 2.1.
WWebMock
WebMock is an MIT-licensed Ruby library for stubbing and setting expectations on HTTP requests, supporting many HTTP clients and blocking real network access in tests.
MMutant
Mutant is a mutation testing tool for Ruby that semantically changes code and checks your RSpec or Minitest tests detect it; it is free for open source and requires a paid subscription for commercial use.
CCodeception
Codeception is an MIT-licensed full-stack PHP testing framework covering unit, functional, API and acceptance tests in one tool, with modules for WebDriver, REST, databases and frameworks such as Laravel and Symfony.
BBehat
Behat is an MIT-licensed behaviour-driven development framework for PHP that runs Gherkin feature files against PHP context classes, often paired with Mink for browser testing.
IInfection
Infection is a BSD-3-Clause AST-based mutation testing framework for PHP that measures test effectiveness with Mutation Score Indicator metrics, supporting PHPUnit, Pest, Codeception and phpspec.
MMockery
Mockery is a BSD-3-Clause mock object framework for PHP with a fluent, readable expectation API, usable with PHPUnit, Pest and other frameworks, and bundled with Laravel's testing tools.
Pphpspec
phpspec is an MIT-licensed specification-oriented BDD toolset for PHP that helps you design classes by writing specs first, with code generation for missing classes and methods.
SSwift Testing
Swift Testing is Apple's open-source (Apache-2.0) testing library for Swift, using @Test and #expect macros, parameterised tests, traits and parallel execution, included in Xcode 16 and Swift 6 toolchains.
NNimble
Nimble is an Apache-2.0 matcher framework for Swift and Objective-C, offering expressive expect(...).to(...) assertions and asynchronous toEventually expectations, used with XCTest or Quick.
SSnapshotTesting (Point-Free)
SnapshotTesting is Point-Free's MIT-licensed snapshot testing library for Swift, snapshotting views, view controllers and any value as images, text, JSON and more, with XCTest and Swift Testing support.
XXCTest
XCTest is Apple's testing framework for unit, performance and UI tests in Xcode projects across Apple platforms, with assertions, expectations for async code, performance metrics and code coverage.
VViewInspector
ViewInspector is an MIT-licensed library for unit testing SwiftUI views at runtime, letting tests traverse the view hierarchy, read values and trigger actions such as button taps.
Ddoctest
doctest is an MIT-licensed, single-header C++ testing framework that is the fastest feature-rich option in compile times and runtime, letting tests live next to production code and be stripped from release binaries.
CCppUTest
CppUTest is a BSD-3-Clause unit testing and mocking framework for C and C++, popular in embedded development for its small footprint, memory leak detection and CppUMock.
UUnity Test (C)
Unity is an MIT-licensed unit testing framework for C focused on embedded toolchains, consisting of a single C file and two headers, from ThrowTheSwitch.org alongside CMock and Ceedling.
Ggcovr
gcovr is a BSD-3-Clause Python tool that summarises GCC/gcov (and LLVM gcov-compatible) coverage for C and C++, producing text, HTML, Cobertura, JaCoCo, LCOV, SonarQube, Coveralls, JSON, CSV and Markdown reports.
EExUnit
ExUnit is Elixir's built-in unit testing framework, with concurrent async tests, describe blocks, setup callbacks, tags, doctests and rich assertion diffs, run with mix test.
MMox
Mox is an Apache-2.0 Elixir library from Dashbit for defining concurrent, behaviour-based mocks that follow the "mocks as explicit contracts" principles and work with async tests.
SStreamData
StreamData is an Apache-2.0 Elixir library for data generation and property-based testing, with composable generators, shrinking and ExUnit integration.
WWallaby
Wallaby is an MIT-licensed Elixir library for browser-based feature tests of web applications, simulating realistic user interactions, running tests concurrently and managing browsers via ChromeDriver or Selenium.
SScalaTest
ScalaTest is an Apache-2.0 testing toolkit for Scala and Java with many testing styles (FunSuite, FlatSpec, WordSpec and more), rich matchers and integration with sbt, Maven and IDEs.
MMUnit
MUnit is an Apache-2.0 Scala testing library from Scalameta with a minimal JUnit-based API, actionable error messages with diffs, fixtures and support for JVM, Scala.js and Scala Native.
SScalaCheck
ScalaCheck is a BSD-3-Clause property-based testing library for Scala and Java, inspired by Haskell's QuickCheck, with generators, shrinking and stateful testing, used by ScalaTest, specs2 and MUnit.
Sspecs2
specs2 is an MIT-licensed Scala library for writing executable software specifications, offering unit and acceptance specification styles, matchers and integration with ScalaCheck.
FFlutter Test (flutter_test)
flutter_test is Flutter's official testing package and flutter test command for unit and widget tests, with WidgetTester, finders, matchers, golden-file tests and coverage.
Mmocktail
mocktail is an MIT-licensed Dart mocking library, inspired by mockito, with null-safety support and no manual mocks or code generation, widely used in Flutter tests.
Mmountebank
mountebank is an MIT-licensed, open-source service virtualization tool that creates multi-protocol test doubles (imposters) over HTTP, HTTPS, TCP and SMTP, configured through a REST API, with proxy recording and JavaScript injection.
SSpecmatic
Specmatic is an MIT-licensed contract-driven development tool that turns API specifications (such as OpenAPI) into executable contracts for contract tests, intelligent service virtualization and backward-compatibility checks.
CCodecov
Codecov by Sentry is a code coverage reporting service that shows coverage for any language, CI and code host in pull request comments and dashboards, with flags, carryforward, test analytics for flaky tests and AI test generation.
CCoveralls
Coveralls is a hosted code coverage history and statistics service that integrates with your CI to report repository, file and line-by-line coverage with pull request notices; free for open source with paid plans for private repos.
PParasoft Virtualize
Parasoft Virtualize is a commercial service virtualization and test data management tool that simulates dependent systems across 120+ message formats and protocols, with codeless and AI-assisted API mocking.
PPa11y CI
Pa11y CI is an LGPL-3.0 accessibility test runner built on Pa11y for continuous integration, testing lists of URLs or entire sitemaps against WCAG and failing builds on issues.
Ccypress-axe
cypress-axe is an MIT-licensed set of custom Cypress commands that inject axe-core into the page under test and check for accessibility violations with cy.checkA11y.
Jjest-axe
jest-axe is an MIT-licensed custom Jest matcher that runs axe-core against rendered HTML or components and asserts toHaveNoViolations, with colour contrast checks disabled because JSDOM cannot compute them.
SStorybook Accessibility Addon
Storybook's accessibility addon (@storybook/addon-a11y) runs axe-core checks on every story, showing violations in an Accessibility panel and enabling automated accessibility tests through Storybook's test tooling.
EEvinced
Evinced is a commercial AI-powered accessibility testing platform for websites and mobile apps that finds, clusters, tracks and prevents accessibility bugs, integrating with Selenium, Cypress, WebdriverIO, XCUITest, Espresso and Appium.
SSiteimprove Accessibility
Siteimprove.ai Accessibility is a commercial platform that continuously monitors websites and digital content for WCAG issues, prioritises them by risk and supports remediation, as part of Siteimprove's content and search platform.
SStark
Stark is an accessibility platform spanning design and code, with plugins for Figma and Sketch, browser extensions, GitHub integration, automated scanning and AI-powered suggestions; free sign-up with paid team plans.
CColour Contrast Analyser (CCA)
The Colour Contrast Analyser (CCA) is a free desktop app for Windows and macOS from TPGi/Vispero that checks foreground and background colours against WCAG 2.0, 2.1 and 2.2 contrast requirements.
AARC (Vispero)
ARC is Vispero's (TPGi's) enterprise accessibility monitoring platform that continuously scans websites and applications to detect regressions, alert teams and report trends against WCAG 2.2, ADA Title II, Section 508, EN 301 549 and the EAA.
AAccessibility Scanner (Android)
Accessibility Scanner is Google's free Android app that scans your app's screens (single snapshots or recorded workflows) and suggests accessibility improvements such as touch target size, contrast and content labels.
FFlutter integration_test
integration_test is Flutter's official package for end-to-end tests that run a full app on physical devices, emulators or Firebase Test Lab, using flutter_test-style APIs and the flutter drive or flutter test commands.
UUI Automator
UI Automator is Google's Android UI testing framework for cross-app and system UI automation; version 2.4 introduced a modern Kotlin API with a uiAutomator test scope, onElement predicates and built-in waiting.
JJetpack Compose UI testing
Jetpack Compose's testing APIs (ui-test-junit4) let Android developers find, assert on and interact with composables through semantics, using createComposeRule on devices or with Robolectric on the JVM.
AAirtest
Airtest is NetEase's Apache-2.0, cross-platform UI automation framework for games and apps that locates UI elements with image recognition, with AirtestIDE and the Poco UI hierarchy library.
MMarathon
Marathon is a GPL-2.0, platform-independent test runner for Android and iOS focused on performance and stability, with batching, device pools, sharding, sorting and preventive and post-factum retries.
PPaparazzi
Paparazzi is Cash App's Apache-2.0 Android library for rendering application screens without a physical device or emulator, enabling fast screenshot tests on the JVM.
RRoborazzi
Roborazzi is an Apache-2.0 Android screenshot testing library that captures screenshots in JVM tests using Robolectric Native Graphics, supporting interactions, Compose and Espresso-style flows.
Iidb (iOS Development Bridge)
idb is Meta's MIT-licensed command-line interface for automating iOS simulators and devices, with a macOS companion and a Python client for remote automation, app installs, XCTest runs, accessibility queries and more.
GGenymotion
Genymotion provides Android virtual devices on the desktop (Windows, macOS, Linux) and in the cloud (SaaS and private cloud), used for app testing, CI automation, security testing and demos.
CCorellium
Corellium is a commercial virtual hardware platform, now part of Cellebrite, that provides virtualised iOS and Android devices and Arm-based IoT and automotive systems for mobile app security testing, DevOps and research.
Eemulator.wtf
emulator.wtf is a commercial Android cloud emulator service focused on performance and fast pull request feedback, with a CLI, Gradle plugin, GitHub Actions integration, sharding and coverage.
DDigital.ai Testing
Digital.ai Testing (formerly Digital.ai Continuous Testing, from Experitest) is a commercial platform for functional, performance and accessibility testing on real and virtual mobile devices and browsers, hosted in dedicated infrastructure across global data centres.
MMobot
Mobot is a commercial mobile app testing service that uses robots to run test cases on real iOS and Android devices, with QA analysts verifying every failure, offered through credits or a flat annual plan.
AAppetize.io
Appetize.io runs iOS simulators and Android emulators in the cloud, streamed to the browser for demos, support, QA and automated testing via Playwright, a CLI and REST API; it has a free plan and paid tiers.
CCodeceptJS
CodeceptJS is an MIT-licensed end-to-end testing framework for Node.js that writes tests as readable user steps and runs them on Playwright, WebDriver, Puppeteer or Appium.
SSelenide
Selenide is an MIT-licensed Java UI testing framework on top of Selenium WebDriver, with a concise fluent API, automatic waiting and built-in screenshots for stable browser tests.
SSeleniumBase
SeleniumBase is an MIT-licensed Python framework for browser automation and end-to-end testing, built on Selenium and pytest, with a CDP mode, a recorder, dashboards and optional Playwright integration.
TTestplane
Testplane (formerly Hermione) is an MIT-licensed end-to-end and visual testing framework for web apps, built on WebdriverIO, with screenshot comparison, retries, an HTML reporter and remote-grid support.
SSerenity/JS
Serenity/JS is an Apache-2.0 TypeScript framework that adds the Screenplay Pattern and living-documentation reports to Playwright Test, WebdriverIO, Cucumber, Mocha and Jasmine suites.
LLightpanda
Lightpanda is an AGPL-3.0 headless browser written from scratch in Zig for automation and AI agents, exposing CDP and WebDriver BiDi so Puppeteer and Playwright scripts can drive it with far less memory than headless Chrome.
MMailpit
Mailpit is an MIT-licensed email testing tool for developers: a local SMTP server that captures outgoing mail, with a web UI, REST API, HTML and link checks, and chaos options for integration tests.
RRobot Framework Browser
Robot Framework Browser is an Apache-2.0 Robot Framework library that drives Chromium, Firefox and WebKit through Playwright, aiming for speed, reliability and visibility in keyword-driven web tests.
RRobot Framework SeleniumLibrary
SeleniumLibrary is the long-standing Apache-2.0 web testing library for Robot Framework, providing keyword-driven browser automation on top of Selenium 4.
PPlaywright-BDD
Playwright-BDD is an MIT-licensed library that turns Gherkin feature files into native Playwright tests, so BDD scenarios run with the Playwright Test runner, fixtures and reporters.
CCypress Cucumber Preprocessor
The Cypress Cucumber Preprocessor (badeball) is an MIT-licensed plugin that lets Cypress run Gherkin feature files with Cucumber-style step definitions, tags and reports.
TTaiko
Taiko is an MIT-licensed Node.js browser automation library from the team behind Gauge, with smart selectors and implicit waits for testing Chromium-based browsers and Firefox.
HHelium
Helium is an MIT-licensed Python library that wraps Selenium with a high-level API, so browser scripts refer to elements by their visible labels instead of IDs, CSS or XPath.
Cchromedp
chromedp is an MIT-licensed Go package that drives Chrome and other Chrome DevTools Protocol browsers directly from Go, without external dependencies such as Selenium or Node.js.
RRod
Rod is an MIT-licensed, high-level Go driver for the Chrome DevTools Protocol, designed for web automation and testing with chained contexts, auto-waiting helpers and iframe and shadow DOM support.
FFerrum
Ferrum is an MIT-licensed Ruby library that controls Chrome directly through the Chrome DevTools Protocol, with no Selenium or ChromeDriver dependency.
CCuprite
Cuprite is an MIT-licensed, pure-Ruby Capybara driver that runs Rails and Rack system tests on headless Chrome through Ferrum, without Selenium or ChromeDriver.
AAtata
Atata is an Apache-2.0 C#/.NET test automation framework built around a fluent page object pattern on Selenium WebDriver, with built-in logging, triggers and reporting integrations.
GGeb
Geb is an Apache-2.0 browser automation library for Groovy that combines WebDriver, jQuery-like content selection and page objects, now developed under the Apache Groovy project.
PPuppeteer Sharp
Puppeteer Sharp is an MIT-licensed .NET port of the Node.js Puppeteer API for automating Chrome and Firefox, with WebDriver BiDi support for Firefox.
FFlaUI
FlaUI is an MIT-licensed .NET library for automated UI testing of Windows desktop applications (Win32, WinForms, WPF and Store apps) built on Microsoft's UI Automation libraries.
Ppywinauto
pywinauto is a BSD-3-Clause Python library for automating the Microsoft Windows GUI, sending mouse and keyboard input to windows and controls through Win32 or UI Automation backends.
SSquish
Squish is a commercial cross-platform GUI test automation tool from Qt Group for desktop, web, mobile and embedded user interfaces, with object-based recognition and an AI assistant in its IDE.
WWorksoft Certify
Worksoft Certify is a commercial, codeless test automation platform for end-to-end business process testing of enterprise applications such as SAP, Oracle and Salesforce.
UUI.Vision RPA
UI.Vision RPA is a browser extension and desktop add-on for web testing and automation, with Selenium IDE-style commands, OCR and image recognition, and an MCP server for AI agents; open source under AGPL-3.0 with a commercial option.
TTestZeus Hercules
TestZeus Hercules is an AGPL-3.0 open-source AI testing agent that turns Gherkin scenarios into automated end-to-end tests for web apps, with API testing support and a focus on complex enterprise platforms.
MMailtrap
Mailtrap is a commercial email platform whose Email Sandbox captures and inspects emails from development, staging and QA environments, alongside sending APIs and device previews.
MMailosaur
Mailosaur is a commercial email and SMS testing service with secure test inboxes, dedicated phone numbers, real-device email previews and APIs for automating sign-up, OTP and MFA flows.
MMailSlurp
MailSlurp is a commercial email and SMS API for testing and automation, with programmable inboxes, phone numbers, OTP capture, device previews and an MCP server for AI agents.
SSelenium Grid
Selenium Grid is the Apache-2.0 component of the Selenium project that runs WebDriver tests in parallel across many machines, browsers and operating systems, in standalone, hub-and-node or fully distributed modes.
DDocker Selenium
Docker Selenium is the official Apache-2.0 project that packages Selenium Grid and browsers as Docker images, with a Helm chart for running and autoscaling Grid on Kubernetes.
MMoon
Moon is a commercial browser automation cluster from Aerokube that runs Selenium, Playwright and Cypress sessions in Kubernetes pods, with up to 4 parallel sessions free.
BBrowserless
Browserless runs headless Chrome, Firefox and WebKit as a service, in Docker or in its cloud, so Puppeteer and Playwright scripts connect over WebSocket; source available under SSPL-1.0 or a commercial licence.
TTestingBot
TestingBot is a commercial cloud for cross-browser and mobile testing that runs Selenium, Appium, Playwright, Cypress, Puppeteer, Espresso, XCUITest and Maestro tests on more than 6,100 browser and device combinations.
BBrowserling
Browserling is a commercial live, interactive cross-browser testing service that streams real desktop browsers running in virtual machines, with SSH tunnels for local testing.
PPolypane
Polypane is a commercial Chromium-based browser for developers and QA that shows many synced viewports side by side, with built-in accessibility, responsive and site-quality checks.
RResponsively App
Responsively App is an AGPL-3.0, Electron-based browser for responsive web development that mirrors interactions across 30+ device previews and takes one-click screenshots.
SSizzy
Sizzy is a commercial Chromium-based desktop browser for web developers with synced device previews, isolated sessions, debugging tools, terminals and coding agents in one window.
HHurl
Hurl is an Apache-2.0 command-line tool, written in Rust on libcurl, that runs and tests HTTP requests defined in plain text files, with captures, assertions and JUnit, TAP, HTML and JSON reports.
NNewman
Newman is Postman's Apache-2.0 command-line collection runner that runs Postman collections and their tests from the terminal or CI, with environments, data files and pluggable reporters.
TTestkube
Testkube is a Kubernetes-native test orchestration platform that runs existing test tools such as k6, Postman, Playwright, Cypress and JMeter inside your clusters, with an open-source agent and a commercial control plane.
SSpectral
Spectral is an Apache-2.0 JSON and YAML linter from Stoplight with ready-made rulesets for OpenAPI, AsyncAPI and Arazzo, used to enforce API style guides in editors and CI.
Ooasdiff
oasdiff is an Apache-2.0 command-line tool that compares OpenAPI specs to produce changelogs and detect breaking changes, with a GitHub Action and a hosted pull-request review workflow.
Ggrpcurl
grpcurl is an MIT-licensed command-line tool for interacting with gRPC servers, like curl for gRPC, using JSON messages and server reflection or proto files to discover services.
VVenom
Venom is an Apache-2.0 CLI from OVHcloud for writing and running integration tests as YAML test suites, with executors for HTTP, gRPC, SQL, Kafka, SSH, SMTP, Redis, shell commands and more.
TTavern
Tavern is an MIT-licensed pytest plugin and command-line tool for testing RESTful APIs, MQTT-based APIs and gRPC services with concise YAML test files.
PPactumJS
PactumJS is an MIT-licensed REST API testing tool for Node.js that covers component, contract and end-to-end API tests, with a fluent API and a built-in mock server.
ZZerocode
Zerocode (ZerocodeTDD) is an Apache-2.0 low-code testing framework for REST and SOAP APIs, Kafka data streams and databases, with tests written as JSON or YAML scenarios run through JUnit.
GGraphQL Inspector
GraphQL Inspector is an MIT-licensed tool from The Guild that compares GraphQL schemas, flags breaking and dangerous changes, validates operations and measures schema coverage.
Ggrpcui
grpcui is an MIT-licensed tool that opens a browser-based UI for interacting with gRPC servers, like Postman for gRPC, using server reflection or proto files.
KKreya
Kreya is a privacy-first desktop API client for gRPC, REST, GraphQL, WebSocket and Server-Sent Events, with scripted tests, snapshots, Git-based collaboration and a free plan.
YYaak
Yaak is a fast, offline-first desktop API client for REST, GraphQL, SSE, WebSocket and gRPC, built with Tauri and Rust; MIT-licensed source, free for personal use, with a paid licence for work use.
RRequestly
Requestly is a Git-native API client and HTTP interception tool, now part of BrowserStack, for designing, testing and mocking APIs and modifying browser traffic; AGPL-3.0 with a free plan.
PPosting
Posting is an Apache-2.0 terminal (TUI) HTTP client, like Postman or Insomnia in your terminal, storing requests as YAML files for version control.
HhttpYac
httpYac is an MIT-licensed CLI and VS Code extension that runs `.http` and `.rest` files, sending REST, SOAP, GraphQL, WebSocket and gRPC requests with assertions and scripting.
AApidog
Apidog is a commercial all-in-one API platform for design, debugging, mocking, automated testing and documentation, with a free plan for up to 4 users and a CLI for CI.
TTestfully
Testfully is a commercial API client, testing and monitoring tool with offline and cloud storage, Postman compatibility, and SOC 2 Type 2, ISO 27001 and HIPAA compliance claims.
AAPI Dash
API Dash is an Apache-2.0, cross-platform, open-source API client built with Flutter, with AI features, response visualisation and code generation for many languages.
RRestfox
Restfox is an MIT-licensed, offline-first, minimalistic HTTP and socket testing client for the web and desktop.
Xxh
xh is an MIT-licensed, fast command-line HTTP client written in Rust that reimplements much of HTTPie's friendly design.
RRestish
Restish is an MIT-licensed CLI for REST-ish HTTP APIs that discovers OpenAPI descriptions to generate API-aware commands, with profiles, auth, pagination and structured output.
SSpeedscale
Speedscale is a commercial traffic-replay platform that records real API traffic in Kubernetes, replays it against new builds with automatic mocks, and grades readiness; its proxymock CLI is free for local use.
HHTTP Toolkit
HTTP Toolkit is an open-source (AGPL-3.0) cross-platform HTTP(S) debugging proxy, analyser and client for intercepting, inspecting, rewriting and mocking traffic from browsers, mobile apps and backend code.
PProxyman
Proxyman is a commercial native macOS app (with Windows, Linux and iOS versions) for capturing, decrypting and mocking HTTP(S) traffic, with breakpoints, scripting and AI-agent access to captured traffic.
C Charles Proxy
Charles is a long-running commercial HTTP proxy, monitor and reverse proxy for Windows, macOS and Linux that shows all HTTP and SSL/HTTPS traffic between a machine and the internet.
SSmocker
Smocker is an MIT-licensed HTTP mock server written in Go with a web UI, YAML or JSON mock definitions, and request history for checking what your service called.
MMoto
Moto is an Apache-2.0 Python library that mocks AWS services in tests, with decorators for boto3 code and a standalone server mode for other languages.
TTraffic Parrot
Traffic Parrot is a commercial service virtualization and API mocking tool that simulates HTTP, gRPC, messaging and other systems for teams and AI coding agents.
Ddockertest
dockertest is an Apache-2.0 Go library from Ory that starts Docker containers for integration tests against real databases and services, and cleans them up afterwards.
MMockttp
Mockttp is an Apache-2.0 JavaScript library from HTTP Toolkit for intercepting, transforming and testing HTTP(S) requests and responses with a real proxy, in Node.js and browsers.
KKiwi TCMS
Kiwi TCMS is a GPL-2.0 open-source test case management system for manual and automated testing, with bug-tracker integration, access control, automation plugins, reports and an API; self-hosted for free or with paid hosting and support.
TTestomat.io
Testomat.io is a commercial test management platform that brings manual and automated tests together, imports tests from framework code, syncs with Jira, and adds AI features and an MCP server; a free plan is available.
AAllure TestOps
Allure TestOps is a commercial test management platform from Qameta Software, the team behind Allure Report, that unifies manual and automated testing, imports results from CI, and offers analytics, available in the cloud or on-premises.
SSquashTM
SquashTM is a test management tool from French company Henix for requirements, test cases, executions and reporting, with BDD, automation and Jira/GitLab integration; it offers a free edition and commercial editions, self-hosted or managed.
AAIO Tests
AIO Tests is a commercial Jira-native test management app with AI test case generation, test cycles, traceability, automation reporting and imports from Xray and Zephyr, for Jira Cloud and Data Center.
QQA Touch
QA Touch is a commercial AI-assisted test management and test automation platform from DCKAP, covering test cases, runs, reviews, requirements and reports with Jira and other integrations.
TTestQuality
TestQuality is a commercial test management tool with deep GitHub and Jira integration, automated result import, and the TestStory.ai test case generator, offering a free plan and per-user paid plans.
TTestFLO
TestFLO is a commercial test management app for Jira from Deviniti, with test repositories, test plans, requirements traceability, REST API automation and CI integration, aimed at regulated and restrictive environments.
TTestCaseLab
TestCaseLab is a commercial SaaS test management tool that brings requirements, test design, test plans, runs, defects and reporting into one workflow, with AI-assisted test case generation.
TTestBench
TestBench is a commercial test management and test design tool from German company imbus, supporting manual and automated testing, keyword- and data-driven test design, versioning and variant management.
AAzure Test Plans
Azure Test Plans is Microsoft's test management service in Azure DevOps for planned manual testing, user acceptance testing and exploratory testing, with traceability to work items and pipelines.
BBrowserStack Test Management
BrowserStack Test Management is a commercial AI-assisted test case management product for manual and automated tests, with Jira integration, test runs, reports and links to BrowserStack's testing clouds.
TTesults
Tesults is a commercial test results reporting service that consolidates automated runs across frameworks and pipelines, adds manual checks and release approvals, and offers a free plan with no time limit.
TTestBeats
TestBeats is an MIT-licensed tool that publishes test results from automation frameworks to Slack, Microsoft Teams, Google Chat and other channels, with an optional results portal.
BBuildkite Test Engine
Buildkite Test Engine is a commercial test analytics service that detects and manages flaky tests, splits tests intelligently across CI agents, and shows test performance, using collectors or JUnit XML.
TTrunk Flaky Tests
Trunk Flaky Tests is a commercial service that detects, quarantines and tracks flaky tests for any language, test runner and CI provider, with AI grouping of related failures and a generous free tier.
CCloudBees Smart Tests
CloudBees Smart Tests, formerly Launchable, is a commercial test intelligence service that uses AI to run the tests most relevant to each code change, reduce flaky-test noise and cut CI waste.
DDevelocity
Develocity, from Gradle Inc., is a commercial build and test observability and acceleration platform with Build Scans, build caching, Test Distribution, Predictive Test Selection and flaky test detection for Gradle, Maven, Bazel and other toolchains.
Mmochawesome
mochawesome is an MIT-licensed reporter for the Mocha JavaScript test framework that generates a standalone HTML/CSS report with charts, filters, inline test code and stack traces.
Ppytest-html
pytest-html is an MPL-2.0 plugin from the pytest-dev organisation that generates an HTML report for pytest results, with environment details, extras such as images and links, and customisation hooks.
TTest Reporter (dorny)
dorny/test-reporter is an MIT-licensed GitHub Action that parses test results in XML or JSON formats and shows them as GitHub check runs or job summaries, with code annotations for failures.
TTestspace
Testspace is a commercial test results dashboard and GitHub-based test management service that unifies automated, manual and exploratory testing, with flaky test analysis and coverage tracking.
MMonocart Reporter
Monocart Reporter is an MIT-licensed Playwright test reporter with an interactive tree-grid report, fast filtering, timeline and resource graphs, and code coverage support.
BBuildPulse
BuildPulse is a commercial CI service that combines faster hosted runners for GitHub Actions, CircleCI and Semaphore with test intelligence: flaky test detection and quarantine, code coverage and engineering metrics.
AArgos
Argos is an MIT-licensed open-source visual testing platform for Playwright, Storybook, Vitest and other tools, with screenshot and file diffs, pull request reviews, flaky detection, and a hosted service with a free Hobby plan.
VVisual Regression Tracker
Visual Regression Tracker is an Apache-2.0, self-hosted visual testing service that compares screenshots from any framework against baselines, with ignore regions, baseline history, several comparison engines and SDKs for JS, Java, Python and .NET.
WWebdriverIO Visual Service
The WebdriverIO Visual Service (@wdio/visual-service) is an MIT-licensed plugin that adds screenshot comparison for screens, elements and full pages to WebdriverIO tests on web, mobile web and native apps.
BBackstopJS
BackstopJS is an MIT-licensed visual regression testing tool for web apps that compares screenshots over time, with Playwright or Puppeteer scripting, Docker rendering and an in-browser report; its README says it needs a new maintainer.
Rreg-suit
reg-suit is an MIT-licensed command-line tool for visual regression testing that compares images, stores snapshots in cloud storage such as S3 or GCS, and reports differences on pull requests through plugins.
HHappo
Happo is a commercial cross-browser visual regression testing service that renders Storybook stories, Playwright, Cypress and other tests in Chrome, Firefox, Safari, Edge and iOS, plus native iOS and Android apps, on every pull request.
Jjest-image-snapshot
jest-image-snapshot is an Apache-2.0 Jest matcher from American Express that compares images against stored baselines, the image equivalent of Jest snapshot testing, used widely for visual regression tests.
Ppixelmatch
pixelmatch is an ISC-licensed, dependency-free JavaScript library from Mapbox for fast pixel-level image comparison with anti-aliasing detection and a perceptual colour difference metric.
OODiff
ODiff is an MIT-licensed, very fast native image comparison tool written in Zig with SIMD optimisations, with a Node.js API, cross-format support, anti-aliasing detection and ignore regions.
DDiffy
Diffy is a commercial visual regression testing service for agencies managing complex websites, comparing environments and releases with AI change summaries and a Claude skill.
SSmartBear VisualTest
SmartBear VisualTest is a commercial AI-assisted visual regression testing service that detects visual differences across releases, integrates with existing test frameworks, and offers a free tier.
VVizzly
Vizzly is a commercial visual testing service aimed at coding agents and teams, with approved screenshot baselines, comments and review decisions that agents can read, a free local loop, and free cloud review for open-source projects.
FFaker (Python)
Faker is an MIT-licensed Python package that generates fake but realistic data such as names, addresses, text, dates and identifiers, with dozens of locales, a pytest fixture and seeding for reproducible test data.
FFaker (JavaScript)
Faker is an MIT-licensed JavaScript and TypeScript library that generates large amounts of fake but realistic data, such as people, addresses, dates, finance and commerce values, in over 70 locales, in Node.js and browsers.
DDatafaker
Datafaker is an Apache-2.0 fake data library for the JVM (Java, Kotlin, Groovy), a modern fork of Java Faker with updated dependencies, many more providers and schema-based generation to CSV, JSON, SQL and more.
BBogus
Bogus is an MIT-licensed fake data generator for .NET (C#, F# and VB.NET), a port of faker.js with a fluent API for building realistic objects for tests and seed data.
MMimesis
Mimesis is an MIT-licensed Python library for generating fake but realistic data in 47 locales, with schema-based generation for JSON, XML and fixtures and a focus on speed.
GGofakeit
Gofakeit is an MIT-licensed random fake data generator for Go with zero dependencies, hundreds of functions, struct filling via tags and concurrency-safe use.
FFake (Rust)
Fake is an Apache-2.0 Rust library and command-line tool for generating fake data in multiple languages, with a derive macro for structs and optional integrations with popular crates.
MMockaroo
Mockaroo is a commercial web service for generating realistic test data in CSV, JSON, SQL and Excel formats, with schemas, mock APIs, datasets and a Docker image for private deployment; up to 1,000 rows are free.
IInstancio
Instancio is an Apache-2.0 Java library that automatically creates and populates objects, including nested objects and collections, for unit tests, with a fluent API to customise values.
AAutoFixture
AutoFixture is an MIT-licensed .NET library that minimises the Arrange phase of unit tests by automatically creating anonymous test data and object graphs, with integrations for xUnit, NUnit and mocking libraries.
EEasy Random
Easy Random is an MIT-licensed Java library that generates random Java beans and records for tests; it has been in maintenance mode since 2020 but released v6 with record support in 2026.
FFishery
Fishery is an MIT-licensed TypeScript-first library from thoughtbot for defining factories that build JavaScript objects for tests, modelled on Ruby's factory_bot.
PPolyfactory
Polyfactory is an MIT-licensed Python library from the Litestar organisation that builds mock data factories from type hints for dataclasses, Pydantic, attrs, TypedDict, msgspec and ORM models.
MModel Bakery
Model Bakery is an Apache-2.0 library that creates Django model instances for tests with one line, filling required fields automatically, including related objects.
GGreenmask
Greenmask is an Apache-2.0 open-source tool for logical database dumping, anonymisation, subsetting, synthetic data generation and restoration, production-ready for PostgreSQL with MySQL in beta.
PPostgreSQL Anonymizer
PostgreSQL Anonymizer is an extension from Dalibo, released under the PostgreSQL Licence, that masks or replaces personal and sensitive data inside PostgreSQL using declarative rules, with static, dynamic and replica masking and anonymous dumps.
SSynthetic Data Vault (SDV)
The Synthetic Data Vault (SDV) is a Python library from DataCebo that learns patterns from real tabular data with machine learning and generates synthetic data, with evaluation reports; it is source-available under the Business Source License.
MMOSTLY AI
MOSTLY AI offers an Apache-2.0 open-source Synthetic Data SDK for training generators on tabular or language data and creating privacy-safe synthetic datasets locally, plus a commercial synthetic data platform.
SSynthea
Synthea is an Apache-2.0 synthetic patient population simulator that generates realistic but not real patient records in HL7 FHIR, C-CDA, CSV and other formats for healthcare software testing.
TTonic Structural
Tonic Structural is a commercial test data management product from Tonic.ai that de-identifies, subsets and synthesizes structured and semi-structured data from production into safe, production-like test data.
DDelphix
Delphix, now part of Perforce, is a commercial DevOps data platform combining data virtualization, automated masking, AI-powered synthetic data generation and test data management for enterprises.
KK2view Test Data Management
K2view Test Data Management is a commercial entity-based TDM product that integrates data from many sources, masks PII, subsets, generates synthetic data and provisions test data through a self-service portal, API and agents.
DDATPROF
DATPROF is a commercial test data management suite from the Netherlands for data masking, synthetic data generation, subsetting, automation and self-service provisioning, with products Privacy, Subset, Runtime, Analyze and Virtualize.
GGenRocket
GenRocket is a commercial enterprise synthetic test data platform built on 'design-driven' data, generating data from rules and scenarios without copying production, with self-service, CI/CD integration and masking options.
SSynthesized
Synthesized is a commercial test data management platform, now focused on SAP and enterprise applications, that builds linked, privacy-safe SAP, database and document data inside your environment for testing, migrations and AI agent evaluation.
GGreat Expectations (GX)
Great Expectations (GX Core) is an Apache-2.0 Python framework for data quality testing that lets teams write Expectations, expressive unit tests for data, validate datasets and generate Data Docs; GX Cloud adds a hosted service with a free Developer option.
SSoda Core
Soda Core is a data quality and data contract verification engine that defines contracts in YAML and validates schema and data across PostgreSQL, Snowflake, BigQuery, Databricks, DuckDB and more; the source is available under the Elastic License 2.0.
DDeequ
Deequ is an Apache-2.0 library from AWS Labs built on Apache Spark for defining 'unit tests for data' that measure data quality in large datasets, with constraint suggestions, metrics and anomaly detection; PyDeequ provides a Python interface.
PPandera
Pandera is an MIT-licensed Python framework for dataset validation that defines schemas for pandas, Polars, PySpark and other dataframes and validates types, values and statistical properties.
RRenovate
Renovate is an AGPL-3.0 dependency update bot from Mend that opens pull requests for outdated packages across 90+ package managers on GitHub, GitLab, Bitbucket, Azure DevOps and more.
AArgo Rollouts
Argo Rollouts is an Apache-2.0 Kubernetes controller that adds blue-green, canary and metric-driven progressive delivery, with automated analysis, promotion and rollback.
FFlagger
Flagger is an Apache-2.0 Kubernetes operator from the Flux project that automates canary, A/B and blue-green releases by shifting traffic and checking metrics and conformance tests.
OOpen Policy Agent
Open Policy Agent (OPA) is an Apache-2.0, CNCF-graduated general-purpose policy engine that evaluates Rego policies for Kubernetes, CI pipelines, APIs, Terraform and more.
CConftest
Conftest is an Apache-2.0 CLI from the Open Policy Agent project for writing Rego tests against structured configuration such as Kubernetes YAML, Terraform, Dockerfiles and JSON.
KKyverno
Kyverno is an Apache-2.0, CNCF policy engine for Kubernetes that validates, mutates, generates and cleans up resources using YAML and CEL policies, with a CLI for testing policies in CI.
OOPA Gatekeeper
OPA Gatekeeper is an Apache-2.0 Kubernetes admission controller that enforces Open Policy Agent Rego policies through ConstraintTemplates and Constraints, with audit of existing resources.
TTerratest
Terratest is an Apache-2.0 Go library from Gruntwork for writing automated tests that deploy real Terraform, Packer, Docker and Kubernetes infrastructure, validate it and tear it down.
TTFLint
TFLint is an MPL-2.0 pluggable Terraform linter that finds provider-specific errors, deprecated syntax and naming issues that terraform validate misses.
TTest Kitchen
Test Kitchen is an Apache-2.0 integration testing harness that converges infrastructure code on isolated platforms such as Docker, Vagrant and cloud VMs, then runs verifiers like InSpec.
KKUTTL
KUTTL (KUbernetes Test TooL) is an Apache-2.0 declarative testing tool for Kubernetes operators and resources, using YAML test steps and assertions against a real or kind cluster.
CChainsaw
Chainsaw is an Apache-2.0 declarative end-to-end testing tool for Kubernetes operators and controllers from the Kyverno project, with steps, assertions, cleanup and reports in YAML.
Kkind
kind (Kubernetes IN Docker) is an Apache-2.0 tool from Kubernetes SIGs that runs local multi-node Kubernetes clusters in Docker containers, widely used for CI testing.
Kkubeconform
kubeconform is an Apache-2.0 fast Kubernetes manifest validator that checks YAML against Kubernetes JSON schemas, including custom resources.
PPluto
Pluto is an Apache-2.0 CLI from Fairwinds that finds deprecated and removed Kubernetes apiVersions in manifests, Helm releases and live clusters before upgrades.
K kube-score
kube-score is an MIT static analysis tool for Kubernetes objects that gives recommendations for reliability and security, such as resource limits, probes and pod disruption budgets.
Hhelm-unittest
helm-unittest is an MIT Helm plugin for BDD-style unit tests of Kubernetes Helm chart templates, written in YAML with snapshot support.
Cchart-testing
chart-testing (ct) is an Apache-2.0 CLI from the Helm project for linting and install-testing Helm charts changed in a pull request, typically on a kind cluster.
CChef InSpec
Chef InSpec is an auditing and testing framework with a Ruby-based DSL for checking that servers, containers and cloud resources meet compliance and security requirements.
GGoss
Goss is an Apache-2.0 YAML-based tool for quick server and container validation, checking packages, files, ports, services and HTTP endpoints, with dgoss for Docker images.
MMolecule
Molecule is an MIT Ansible-native testing framework for roles, playbooks and collections, creating test instances, converging them and running verification and idempotence checks.
Aansible-lint
ansible-lint is a GPL-3.0 linter from the Ansible project that checks playbooks, roles and collections for practices and behaviour that could be improved, with profiles and auto-fix.
Tterraform-compliance
terraform-compliance is an MIT, BDD-style test framework that checks Terraform plans against security and compliance rules written in Gherkin.
CContainer Structure Test
Container Structure Test is an Apache-2.0 tool from Google for validating the structure of container images: commands, file contents, metadata and existence checks defined in YAML.
Aact
act is an MIT CLI that runs GitHub Actions workflows locally in Docker, so you can test workflow changes without pushing commits.
Aactionlint
actionlint is an MIT static checker for GitHub Actions workflow files that catches syntax errors, bad expressions, type mismatches and shell script issues via ShellCheck.
Zzizmor
zizmor is an MIT static analysis tool for GitHub Actions that finds security problems such as template injection, excessive permissions, credential persistence and unpinned actions.
Ppre-commit
pre-commit is an MIT framework for managing multi-language Git pre-commit hooks, running linters, formatters and checks before code is committed and in CI.
Rreviewdog
reviewdog is an MIT tool that posts results from any linter or code analysis tool as pull request review comments, filtered to changed lines, on GitHub, GitLab, Bitbucket and Gerrit.
MMegaLinter
MegaLinter is an AGPL-3.0 open-source linter orchestrator from OX Security that runs a large set of linters, formatters and security scanners across many languages in one Docker-based CI job.
SSuper-Linter
Super-Linter is an MIT ready-to-run collection of linters and code analysers packaged as a GitHub Action and container, validating many languages in parallel.
DDanger JS
Danger JS is an MIT tool that runs during CI to automate code review conventions, failing or commenting on pull requests based on rules written in JavaScript or TypeScript.
QQlty
Qlty is a code quality platform and source-available CLI (Business Source License 1.1) that runs 70+ linters, formatters and security tools across 40+ languages, with cloud coverage and maintainability tracking.
CCodacy
Codacy is a SaaS code quality and security platform that scans repositories and pull requests for quality issues, security vulnerabilities, duplication and coverage, with a free IDE extension and plans for teams.
DDeepSource
DeepSource is a SaaS code review platform combining static analysis and AI review to find bugs, anti-patterns, security issues and coverage gaps on every pull request.
KKnapsack Pro
Knapsack Pro is a SaaS test-splitting service that balances test files across parallel CI nodes using a dynamic queue based on recorded execution times, for RSpec, Cypress, Jest and more.
Ggotestsum
gotestsum is an Apache-2.0 'go test' runner that formats output for humans, writes JUnit XML for CI, summarises results and can rerun failed tests.
Ppytest-xdist
pytest-xdist is an MIT pytest plugin that distributes tests across multiple CPUs or machines, speeding up large Python suites with load balancing.
P pytest-split
pytest-split is an MIT pytest plugin that splits a test suite into equally timed groups based on recorded durations, for sharding across CI jobs.
Ppytest-rerunfailures
pytest-rerunfailures is an MPL-2.0 pytest plugin from pytest-dev that re-runs failed tests up to a set number of times to reduce flaky failures.
GGradle Test Retry Plugin
The Gradle Test Retry Plugin is an Apache-2.0 plugin from Gradle that retries failed JVM tests to mitigate flakiness, reporting tests that passed on retry as flaky.
KKover
Kover is an Apache-2.0 code coverage toolset from JetBrains for Kotlin projects, with a Gradle plugin for coverage reports, verification rules and Android variant support.
Ccdxgen
cdxgen is an Apache-2.0 CycloneDX SBOM generator for source code, container images and many language ecosystems, used to produce bills of materials in CI.
CCosign
Cosign is an Apache-2.0 Sigstore tool for signing and verifying container images, binaries and attestations, including keyless signing with OIDC and a transparency log.
OOpenSSF Scorecard
OpenSSF Scorecard is an Apache-2.0 tool that scores open-source repositories on security practices such as branch protection, pinned dependencies, CI tests, fuzzing and dangerous workflows.
BBunnyshell
Bunnyshell is a SaaS environments platform that creates a full-stack preview environment for every pull request on Kubernetes, destroyed on merge, with pay-as-you-go pricing per environment minute.
OOkteto
Okteto is a Kubernetes environments platform for development, preview and test environments, and environments for AI coding agents, free for up to five users on its Starter plan.
EESLint
ESLint is the MIT-licensed, pluggable linter for JavaScript and TypeScript that finds and fixes problems using configurable rules, flat config and a large plugin ecosystem.
RRuff
Ruff is an MIT, Rust-based Python linter and formatter from Astral that is 10-100x faster than Flake8 and Black, with over 900 built-in rules and auto-fix.
Ggolangci-lint
golangci-lint is a GPL-3.0 fast linters runner for Go that runs over a hundred linters in parallel with caching, YAML configuration and IDE integration.
RRuboCop
RuboCop is an MIT Ruby static code analyser and formatter based on the community Ruby style guide, with hundreds of cops, auto-correct and extensions for Rails and RSpec.
PPMD
PMD is an extensible, BSD-style licensed multi-language static code analyser for Java, Apex, Kotlin, JavaScript and more, with a copy-paste detector (CPD).
SSpotBugs
SpotBugs is an LGPL-2.1 static analysis tool, the successor to FindBugs, that inspects Java bytecode for bug patterns, with plugins such as Find Security Bugs.
CCheckstyle
Checkstyle is an LGPL-2.1 development tool that checks Java code against a coding standard, with built-in Google and Sun configurations and build integrations.
CCppcheck
Cppcheck is a GPL-3.0 static analysis tool for C and C++ that focuses on detecting undefined behaviour and real bugs with a low false-positive rate.
PPHPStan
PHPStan is an MIT PHP static analysis tool that finds bugs without running code, using rule levels from 0 to 10 and a baseline for gradual adoption.
PPsalm
Psalm is an MIT PHP static analysis tool for finding type errors and security vulnerabilities, including taint analysis for injection flaws.
Mmypy
mypy is an MIT optional static type checker for Python that checks type hints, supports gradual typing and integrates with editors and CI.
PPyright
Pyright is an MIT static type checker for Python from Microsoft, built for speed on large codebases, with a CLI and language server used by Pylance.
SShellCheck
ShellCheck is a GPL-3.0 static analysis tool for bash and sh scripts that warns about quoting bugs, syntax errors, pitfalls and portability issues with explanations.
EError Prone
Error Prone is an Apache-2.0 static analysis tool from Google that hooks into the Java compiler to catch common mistakes as compile-time errors, with suggested fixes.
Ddetekt
detekt is an Apache-2.0 static code analysis tool for Kotlin that reports code smells, complexity and style issues, with a Gradle plugin, baselines and custom rules.
SSwiftLint
SwiftLint is an MIT tool from Realm for enforcing Swift style and conventions, with over 200 rules, auto-correct and Xcode, SwiftPM and CI integration.
CClippy
Clippy is the official Rust linter, dual-licensed MIT or Apache-2.0, with hundreds of lints that catch common mistakes and improve Rust code, run via cargo clippy.
BBiome
Biome is an Apache-2.0 toolchain for web projects that provides a fast formatter and linter for JavaScript, TypeScript, JSX, JSON, CSS and GraphQL in one Rust binary.
PPylint
Pylint is a GPL-2.0 static code analyser for Python that checks errors, coding standards, code smells and refactoring opportunities, with plugins and detailed messages.
IInfer
Infer is an MIT static analyser from Meta for Java, C, C++ and Objective-C that finds null dereferences, resource leaks, races and other bugs with inter-procedural analysis.
Wwebhint
webhint is an Apache-2.0 customisable linting tool for websites that checks accessibility, speed, cross-browser compatibility, security headers and PWA best practices.
UUnleash
Unleash is an open-source (AGPL-3.0) feature management platform for feature flags, gradual rollouts, strategies and kill switches, self-hosted or on Unleash Cloud.
FFlagsmith
Flagsmith is a BSD-3-Clause open-source feature flag and remote config platform with segments, A/B testing support and self-hosted or cloud deployment.
GGrowthBook
GrowthBook is an open-source feature flagging and experimentation platform with a warehouse-native stats engine, A/B testing, product analytics and self-hosted or cloud options.
OOpenFeature
OpenFeature is an Apache-2.0 CNCF open specification and set of SDKs that provide a vendor-agnostic API for feature flagging, with providers for many flag platforms.
FFlipt
Flipt is a Git-native feature management platform under the Fair Core License (MIT future licence), storing flags in Git with environments, branches and OpenFeature support.
SStatsig
Statsig is a SaaS product development platform with experimentation, feature gates, product analytics and session replay, offering a free tier of 2M events per month.
PPostHog
PostHog is an open-source product platform combining product analytics, session replay, feature flags, experiments, surveys and error tracking, with a monthly free tier and usage-based pricing.
OOptimizely
Optimizely is a commercial digital experience platform with web and feature experimentation, personalisation and content management, priced by quote.
WWingify (VWO and AB Tasty)
Wingify is the experience optimisation platform formed when VWO and AB Tasty united, offering experimentation, personalisation, behaviour analytics and feature management with a 30-day free trial.
MMull
Mull is an Apache-2.0 LLVM-based mutation testing and fault injection tool for C and C++ that mutates code at compile time and reports surviving mutants.
GGremlins
Gremlins is an Apache-2.0 mutation testing tool for Go, designed for small to medium modules and usable as a CI quality gate.
CCosmic Ray
Cosmic Ray is an MIT mutation testing tool for Python that applies mutation operators to source code and runs your test suite against each mutant, with distributed execution.
MMuter
Muter is an MIT automated mutation testing tool for Swift, inspired by Stryker, PITest and Mull, for checking the effectiveness of iOS and macOS test suites.
CChaosBlade
ChaosBlade is an Apache-2.0 chaos engineering toolkit from Alibaba that injects CPU, memory, network, disk, process, JVM, container and Kubernetes faults from one CLI, with an AI agent layer.
CChaosd
Chaosd is an Apache-2.0 chaos engineering toolkit from the Chaos Mesh project for injecting faults into physical and virtual Linux hosts via a CLI or HTTP service.
Kkube-monkey
kube-monkey is an Apache-2.0 implementation of Netflix's Chaos Monkey for Kubernetes that randomly deletes pods of opted-in workloads on a schedule.
Cchaoskube
chaoskube is an MIT tool that periodically kills random pods in a Kubernetes cluster, with filters by namespace, labels, annotations and time windows.
CChaos Monkey for Spring Boot
Chaos Monkey for Spring Boot is an Apache-2.0 library from codecentric that attacks running Spring Boot apps with latency, exceptions, kills and memory assaults, controlled via Actuator.
HHarness Resilience Testing (Chaos Engineering)
Harness Chaos Engineering, now presented as part of Harness Resilience Testing, is a commercial chaos platform built on LitmusChaos with experiment libraries, probes and resilience scoring.
AAWS Resilience Hub
AWS Resilience Hub is a managed AWS service that assesses application resilience against RTO and RPO targets, recommends improvements and runs resilience tests via AWS FIS.
WW&B Weave
W&B Weave is an Apache-2.0 toolkit from Weights & Biases for tracing and evaluating AI agents and LLM apps, with scorers, datasets, evaluations and an online UI.
LLM Evaluation Harness
LM Evaluation Harness is an MIT framework from EleutherAI for few-shot evaluation of language models on hundreds of benchmark tasks, used by the Hugging Face Open LLM Leaderboard.
GGuardrails AI
Guardrails AI is an Apache-2.0 Python framework for adding input and output validation to LLM applications, with a hub of validators and structured output generation.
NNeMo Guardrails
NeMo Guardrails is an Apache-2.0 toolkit from NVIDIA for adding programmable guardrails to LLM-based conversational systems, using Colang flows and input, output, dialog and retrieval rails.
MMLflow GenAI Evaluation
MLflow is an Apache-2.0 open-source AI engineering platform whose GenAI features provide tracing, LLM-judge scorers, evaluation datasets and production monitoring for agents and LLM apps.
EEvidently
Evidently is an Apache-2.0 open-source ML and LLM evaluation and observability framework with 100+ built-in metrics, test suites, reports and a monitoring UI.
HHELM
HELM (Holistic Evaluation of Language Models) is an Apache-2.0 framework from Stanford CRFM for reproducible, transparent evaluation of language models across many scenarios and metrics; it entered maintenance mode in June 2026.
OOpenCompass
OpenCompass is an Apache-2.0 LLM evaluation platform from Shanghai AI Laboratory that benchmarks open and API models across large dataset collections with distributed evaluation.
LLighteval
Lighteval is an MIT toolkit from Hugging Face for fast, flexible LLM evaluation across many backends, with sample-by-sample results and custom tasks.
LLaminar
Laminar is an Apache-2.0 open-source observability platform for AI agents with OpenTelemetry-native tracing, evaluations and natural-language signals that flag agent failures.
HHelicone
Helicone is an Apache-2.0 open-source AI gateway and LLM observability platform that logs requests, costs and latency with one line of code, plus prompt experiments and evaluations.
DDeepchecks
Deepchecks is an open-source (AGPL-3.0) Python library for continuous validation of ML models and data, with test suites for data integrity, drift and model performance, plus a commercial LLM evaluation product.
OOpenLLMetry
OpenLLMetry is an Apache-2.0 set of OpenTelemetry extensions from Traceloop that instrument LLM providers, vector databases and frameworks, sending traces to any OTel backend.
AAgentOps
AgentOps is an MIT Python SDK and app for monitoring AI agents, tracking LLM calls, costs, tool use and sessions, with replays for debugging agent runs.
PPydantic Evals
Pydantic Evals is an MIT evaluation framework from the Pydantic AI project for testing LLM apps and agents with typed datasets, cases and evaluators, integrated with Logfire tracing.
DDeepTeam
DeepTeam is an Apache-2.0 open-source red-teaming framework from Confident AI that simulates jailbreaks, prompt injection and multi-turn attacks to find vulnerabilities in LLM apps and agents.
AArthur Engine
Arthur Engine is an MIT open-source service from Arthur for monitoring and governing AI/ML workloads, with real-time guardrails for PII, hallucination, prompt injection and toxicity.
FFiddler AI
Fiddler AI is a commercial AI observability and governance platform for agents, LLMs and ML models, with guardrails, evaluations and monitoring; CrowdStrike has announced it will acquire Fiddler.
OOpenEvals
OpenEvals is an MIT package from LangChain with ready-made evaluators for LLM apps, including LLM-as-judge prompts, exact match, embedding similarity and code checks.
LLakera
Lakera, now part of Check Point, offers AI security products: a Guard API (documented as Check Point AI Guardrails) for runtime screening of prompt injection and data leaks, and AI red teaming.
CCodeRabbit
CodeRabbit is a SaaS AI code review tool that reviews pull requests and code in the IDE and CLI, with summaries, line-by-line feedback, linters and SAST, free for public repositories.
PPR-Agent
PR-Agent is an MIT open-source AI code review agent, donated by Qodo to the community, that describes, reviews and suggests improvements for pull requests using your own LLM keys.
GGreptile
Greptile is a SaaS AI code review tool that builds a graph index of your codebase and uses agents to review and test pull requests with full repository context.
SSourcery
Sourcery is a SaaS AI code reviewer for GitHub and GitLab pull requests and the IDE, free for open source, with Pro and Team plans per developer.
CCodeAnt AI
CodeAnt AI is a SaaS platform for AI code review, code quality gates and code security (SAST, SCA, secrets, IaC), plus pentesting, priced per developer.
CCursor Bugbot
Cursor Bugbot is an AI code review agent from Cursor that reviews pull requests on GitHub, GitLab, Bitbucket and Azure DevOps for bugs and security issues, with rules, autofix and a CI check.
GGitHub Copilot code review
GitHub Copilot code review is GitHub's AI reviewer that comments on pull requests and in the IDE, with effort levels that set AI-credit cost per review.
MMaze
Maze is a SaaS user research platform for prototype testing, usability tests, surveys, card sorting, tree testing and AI-moderated interviews, with a participant panel of over 6 million people.
UUserTesting
UserTesting is an enterprise experience research platform with a large participant network for recorded and live feedback on apps, prototypes and content, including a Figma integration.
LLookback
Lookback is a remote user research tool for moderated and unmoderated sessions with live stakeholder viewing, one-click notes and AI-suggested findings.
U Useberry
Useberry is a SaaS user testing tool for prototype tests, card sorting, tree testing, first-click, five-second and preference tests, with participant recruitment.
LLyssna
Lyssna (formerly UsabilityHub) is a SaaS research platform for usability tests, surveys, interviews, card sorting, tree testing and prototype tests, with a 690,000+ participant panel.
O Optimal Workshop
Optimal (Optimal Workshop) is a user research platform known for card sorting and tree testing, with surveys, live site testing and recruitment from 10M+ participants.
UUserlytics
Userlytics is a SaaS user testing platform for moderated and unmoderated studies on websites, prototypes and mobile apps, with AI follow-up questions and analysis.
UUXtweak
UXtweak is a SaaS UX research platform covering prototype, website and mobile app testing, card sorting, tree testing, surveys and session recording, with a free plan.
LLoop11
Loop11 is a SaaS usability testing tool for websites, prototypes and mobile, with IA testing, moderated sessions, benchmarking, heatmaps and AI insights.
HHotjar
Hotjar, now part of Contentsquare, provides heatmaps, session recordings, surveys and feedback for websites; new sign-ups are directed to Contentsquare's plans.
MMicrosoft Clarity
Microsoft Clarity is a free behaviour analytics tool with session recordings, heatmaps and AI summaries for websites and apps.
LlibFuzzer
libFuzzer is LLVM's in-process, coverage-guided, evolutionary fuzzing engine, built into Clang via -fsanitize=fuzzer and used with sanitizers to find memory-safety and logic bugs in C and C++.
Ccargo-fuzz
cargo-fuzz is the Rust Fuzz project's Cargo subcommand for fuzzing Rust code with libFuzzer, handling target scaffolding, running and test-case minimisation.
CClusterFuzzLite
ClusterFuzzLite is Google's Apache-2.0 continuous fuzzing solution that runs in CI such as GitHub Actions, fuzzing pull requests and running batch fuzzing with coverage reports.
Ssyzkaller
syzkaller is Google's Apache-2.0 unsupervised coverage-guided kernel fuzzer for Linux, FreeBSD, Fuchsia, gVisor, NetBSD, OpenBSD and Windows.
FFuzzilli
Fuzzilli is Google Project Zero's Apache-2.0 coverage-guided fuzzer for JavaScript engines, mutating a custom intermediate language, FuzzIL, that is lifted to JavaScript.
FFuzzTest
FuzzTest is Google's Apache-2.0 C++ framework for fuzz tests: property-based tests run with coverage-guided fuzzing, integrated with GoogleTest.
LLibAFL
LibAFL is a Rust library of reusable fuzzer components from the AFL++ team, for building fast, scalable, custom fuzzers across platforms and targets.
RRadamsa
Radamsa is an MIT-licensed, scriptable test-case generator for robustness testing that mutates sample files into malformed inputs.
P pgTAP
pgTAP is a unit testing framework for PostgreSQL written in PL/pgSQL and PL/SQL, providing TAP-emitting assertions for schema, data and functions, run with pg_prove.
UutPLSQL
utPLSQL is an Apache-2.0 unit testing framework for Oracle PL/SQL and SQL, with annotations, rich expectations and reporters for SonarQube, Jenkins and TeamCity.
SSQLFluff
SQLFluff is an MIT dialect-flexible SQL linter and auto-formatter with Jinja and dbt templating support.
AAtlas
Atlas is an Apache-2.0 schema-as-code tool from Ariga for declarative and versioned database migrations, with migration linting and schema tests in CI.
SSquawk
Squawk is an Apache-2.0 linter for PostgreSQL migrations that flags changes likely to cause downtime, with a CLI, Docker image, GitHub Action and browser playground.
DDatabase Lab Engine
Database Lab Engine (DBLab) is Postgres.ai's Apache-2.0 tool for thin cloning and branching of large PostgreSQL databases in seconds for development and testing.
Ddbt tests
dbt tests are the built-in data tests and unit tests of dbt, the Apache-2.0 data transformation framework, used to validate models with unique, not_null, accepted_values and relationships checks.
RRenode
Renode is Antmicro's MIT-licensed open-source simulation framework that runs unmodified embedded firmware on virtual boards and multi-node networks, with Robot Framework-based testing for CI.
CCeedling
Ceedling is an MIT build and test system for C projects from ThrowTheSwitch, combining Unity, CMock and CException for embedded unit testing.
Ccmocka
cmocka is an Apache-2.0 unit testing framework for C with mock objects that needs only the standard C library, working across platforms including embedded.
Llabgrid
labgrid is an LGPL-2.1-or-later Python library from Pengutronix for controlling embedded boards in automated tests, with remote access, power and boot control, and a pytest plugin.
Ppytest-embedded
pytest-embedded is Espressif's MIT pytest plugin for embedded testing, with services for serial, ESP-IDF, Arduino, QEMU, Wokwi and JTAG.
WWokwi
Wokwi is an online and VS Code simulator for ESP32, Arduino, STM32 and other microcontrollers, with Wokwi CI for automated firmware tests in GitHub Actions and GitLab CI.
VVectorCAST
VectorCAST is Vector's commercial embedded software testing platform for C, C++ and Ada unit and integration testing with code coverage up to MC/DC and safety-standard qualification.
AAltTester Unity SDK
AltTester Unity SDK is a GPL-3.0 open-source UI test automation tool for Unity games that finds and drives game objects from tests in C#, Python, Java or Robot Framework.
G GameDriver
GameDriver is a commercial test automation tool for Unity and Unreal games and XR apps that runs inside the game, with multiplayer testing and an MCP server for AI-assisted test creation.
Ppseudo-localization
pseudo-localization is an MIT JavaScript library that transforms UI strings into pseudo-languages, accented or bidirectional, to catch localisation issues before translations exist.
Ii18n-tasks
i18n-tasks is an MIT Ruby gem that statically finds missing and unused translation keys in Rails and Ruby i18n projects, with normalisation, health checks and spec integration.
Ee2e
e2e is an Apache-2.0 end-to-end testing framework for web and mobile apps where an AI agent drives the app toward a natural-language goal and Playwright-style locators and assertions verify the result.
EExpect
Expect is a source-available skill for coding agents such as Claude Code, Codex and Cursor that reads your git changes, writes a test plan and runs it in a real browser with Playwright.
RReplay QA
Replay QA is an autonomous testing service from Replay.io that explores each build in an instrumented Chromium browser, writes and runs its own tests, and returns bugs with a deterministic recording, root cause and suggested fix.
J Jina
Jina is an autonomous AI QA engineer that plans production-like scenarios for each pull request and sends a swarm of investigation agents to run the code and catch bugs that only appear at runtime.
TTestifly
Testifly is an autonomous AI QA platform that discovers your web app's flows from a URL, generates and self-heals end-to-end tests, gates deploys in CI and exposes an MCP server.
MManta AI
Manta AI is an autonomous web app testing agent that crawls an app from a URL, maps pages and flows, finds bugs and dead clicks, and builds self-healing tests, with a runner you can host behind your firewall.
RRova AI
Rova AI is a goal-driven autonomous testing agent for web and mobile apps: you describe what the product should do, and it explores, validates workflows and reports, including from tags on Jira or Linear tickets.
CCanary
Canary is an AI QA tool from Y Combinator's Winter 2026 batch that acts as an independent tester for code written by coding agents, running your app and trying to break every change.
DDocket
Docket is a vision-first end-to-end testing platform for web, iOS, Android and desktop that clicks by on-screen coordinates instead of selectors and self-heals when elements move.
LLark
Lark is an always-on, self-healing end-to-end testing service from ex-Stripe engineers that runs UI, API, CLI and mobile tests on a continuous cadence and supports coding agents such as Claude Code, Cursor and Codex.
SSimulithic
Simulithic maps every user flow in a web app with one command and verifies each flow on every pull request across real browsers, operating systems, phones and network speeds, each in an isolated VM.
ZZorro by Narrative
Zorro, from YC company Narrative, runs AI bug bashes and regression tests on pull requests, with agents that explore an app like a manual tester and report bugs with recordings and console logs.
DDonobu
Donobu is an AI-driven QA platform and managed service that tests releases across functional, API, exploratory, mobile, localization and content checks, producing replayable Playwright tests.
D Deltix
Deltix is an AI agent that runs plain-English tasks on an iOS Simulator on your Mac and reports whether a real user could complete them, keeping source code and builds local.
DDebuggAI
DebuggAI is a no-code AI testing service that exercises a web app like a real customer and catches broken signup, login, checkout and other core flows after every change.
Aagent-device
agent-device is Callstack's MIT-licensed device layer for AI coding agents: a CLI, MCP server and typed Node.js API that let agents inspect, drive, debug and verify apps on iOS, Android, TV, web and desktop targets.
AAutosana
Autosana runs AI-agent end-to-end tests written as one-sentence flows on iOS, Android, web, Chrome extensions and App Clips, on every pull request and from coding agents via CLI or MCP.
AAucert
Aucert sends a team of specialist AI agents to explore mobile app builds, test critical flows against your standards and return evidence-backed verdicts before release.
QQualGent
QualGent is an autonomous QA platform for mobile teams that combines AI agents with human calibration to test AI-built iOS and Android apps and turn every bug and fix into new coverage.
QQuash
Quash is a mobile-first AI testing platform where you describe tests in plain language, run them on real devices with backend checks and self-healing, and manage everything through its Mahoraga conversational layer.
QQApilot
QApilot is an AI-native mobile testing platform that explores Android, iOS and Flutter apps, generates and self-heals tests, and offers an MCP server so Claude, Cursor or other clients can drive real Android devices.
Nnunu.ai
nunu.ai runs multimodal AI agents that play and test games and apps like human players across more than 60 real iOS, Android and PC devices, with no integration required.
CConfident AI
Confident AI is the hosted LLM evaluation and observability platform from the makers of DeepEval and DeepTeam, covering evals in CI, tracing, voice agents, conversation simulation, red teaming and AI governance.
OOpenLIT
OpenLIT is an Apache-2.0, OpenTelemetry-native platform for AI agents and coding agents that combines LLM tracing, evals with CI gates, guardrails, prompt management, cost tracking and GPU monitoring, free to self-host.
RRoark
Roark is a QA and evals platform for voice AI agents that simulates hundreds of callers before launch and scores every production call on 500+ audio-native metrics, with usage-based pricing.
HHarbor
Harbor is an Apache-2.0 framework from the creators of Terminal-Bench for evaluating and optimising agents and models in sandboxed container environments, and the official harness for Terminal-Bench 2.0.
BBotium
Botium is an MIT-licensed open-source framework for testing chatbots and conversational AI, billed as "the Selenium for chatbots", with connectors for most chatbot platforms and APIs.
SSentrial
Sentrial turns production failures of AI agents into tested improvements, with Python and TypeScript SDKs, OpenTelemetry support, issue detection and regression tests built from real sessions.
LLemma
Lemma is production monitoring for AI agents that audits every trace against the agent's instructions, groups recurring silent failures into issues, alerts in Slack and creates online evals after a fix.
SScorecard
Scorecard is a simulation and evaluation platform for AI agents that runs agents through thousands of realistic scenarios, combines LLM scoring, human feedback and production monitoring, and integrates with major agent frameworks.
OOkareo
Okareo simulates real users, called Drivers, to test voice, text and headless AI agents across long multi-turn conversations, then evaluates every turn and monitors production.
RRelyable
Relyable is a simulation and monitoring platform for AI voice agents that generates realistic test conversations, scores calls against your rubric and monitors production, with native Vapi, Retell and ElevenLabs integrations.
BBluejay
Bluejay is a QA platform for voice and chat AI agents that runs real-world simulations before deployment and provides observability afterwards, with usage-based pricing and free starting credits.
RRespan
Respan is an open-source AI gateway with built-in observability and evals that routes calls to 1,000+ models through one API key and traces every call, with paid tiers for logs and scores.
KKashikoi
Kashikoi is a simulation engine that autonomously evaluates AI agents by simulating real-world interactions, with custom metrics, comparisons and connectors built for your stack.
OOpenlayer
Openlayer is an AI testing, monitoring and governance platform that runs tests before you ship, monitors live systems, enforces policy in real time and keeps audit-ready evidence.
HHoneyHive
HoneyHive is an agent observability and evaluation platform for tracing prompts and tool calls, scoring production quality, detecting drift and running offline evals and regression suites built from real cases.
FFuture AGI
Future AGI is an evaluation, simulation and observability platform for AI agents with text and voice simulation, synthetic data, tracing and a gateway, priced by usage with generous free tiers.
SSalus
Salus is a runtime authorisation layer for AI agents that checks consequential tool calls against policy, session evidence and intent before execution, and returns exact corrections to the agent.
PPromptLayer
PromptLayer is a prompt CMS, eval harness and observability stack that lets domain experts edit, version, test and deploy prompts, run dataset-backed regression evals and trace production.
LLunary
Lunary is an observability and prompt management platform for LLM apps and chatbots that shows how models perform in real time and how users interact with them.
AAgentEvals
AgentEvals is LangChain's MIT-licensed collection of evaluators for agent trajectories, the intermediate steps and tool calls an agent takes, in Python and JavaScript.
SStrix
Strix is an Apache-2.0 open-source AI pentesting tool whose autonomous agents run your code, find vulnerabilities and validate them with working proofs of concept, from the CLI or in CI, with a hosted cloud edition.
SShannon
Shannon is Keygraph's AGPL-3.0 autonomous AI pentester for web apps and APIs that analyses source code, then executes real exploits with browser automation and CLI tools, reporting only vulnerabilities it can prove.
PPentestGPT
PentestGPT is an MIT-licensed autonomous penetration testing agent that drives Claude Code or Codex through staged recon, exploitation and reporting pipelines for CTFs and pentests, with a legacy interactive mode from its USENIX 2024 paper.
D Dalfox
Dalfox is an MIT-licensed, Rust-based open-source XSS scanner that discovers parameters, probes reflected, stored and DOM-based XSS, verifies each hit in the parsed DOM, and runs as a CLI, REST server or MCP tool.
XXBOW
XBOW is an autonomous offensive security platform that sends thousands of agents to attack your applications and APIs, reports only validated exploits with full reproduction details, and re-tests fixes.
MMindFort
MindFort deploys swarms of AI agents that pentest live applications in parallel, prove exploitable vulnerabilities and help fix them, with continuous testing by default.
CCasco
Casco is an AI-native AppSec platform offering continuous agentic pentesting for web apps, APIs, cloud, mobile, networks and AI agents, with optional security-engineer review and FedRAMP 20x certification.
VVeria Labs
Veria is an autonomous pentester from Veria Labs that maps your attack surface, proves real exploits and drafts fixes, used by teams such as Ramp, PostHog and Pydantic.
P Parameter
Parameter runs autonomous AI agents that pentest web apps, APIs and infrastructure continuously, needing only a URL and credentials, with proofs of concept and compliance evidence.
AAntigen
Antigen continuously maps and exploits your attack surface with its tCell engine, which chains weaknesses like an attacker, then fixes confirmed vulnerabilities and verifies the fix.
GGecko Security
Gecko is an AI code security engineer that reasons across code, infrastructure and intent to find exploitable vulnerabilities, including business logic flaws, and fixes the root cause and every variant in one PR.
EEscape
Escape is an AI-powered offensive security platform with in-house DAST for business-logic testing, continuous agentic pentesting of every release, API discovery and AI red teaming.
AArgusRed
ArgusRed, by model lab Cosine, reads your code like an attacker, tries each suspected flaw in an isolated sandbox and reports only exploits it could reproduce, with a fix.
C Corgea
Corgea is an AI application security platform that finds, triages and fixes vulnerabilities across code, packages, IaC, containers and secrets, with AI SAST, AI pentesting and a free plan.
ZZeroPath
ZeroPath is an AI-native SAST and AppSec platform that finds and fixes exploitable vulnerabilities, including business logic flaws, across code, dependencies, infrastructure and runtime, with automated threat modelling.
DDryRun Security
DryRun Security provides AI-native SAST, adversarial pull request reviews, dependency exploit validation, natural-language code policies, secrets and IaC checks for teams shipping AI-written code.
AAptori
Aptori is an autonomous application security platform that analyses code, APIs, authorisation and business logic and safely reproduces attack paths with red, blue and purple agents from shared context.
CCaido
Caido is a lightweight web security auditing toolkit and proxy for pentesters and bug bounty hunters, with a headless API-first design, AI plugins using your own LLM provider and a Client SDK for agents.
MMindgard
Mindgard is an attack-led AI security platform that continuously red-teams AI agents and systems, finds and validates high-impact AI vulnerabilities, and adds runtime protection, built on Lancaster University research.
RRepello AI
Repello AI is an enterprise platform for autonomous AI red teaming, runtime guardrails and continuous security of agentic workflows, MCP connections and chatbots, with a free red-teaming scan.
AAgentic Security
Agentic Security is an Apache-2.0 open-source vulnerability scanner for LLMs and agent workflows that probes jailbreaks, fuzzing and multimodal attacks across text, images and audio.
Vvet
vet by SafeDep is an Apache-2.0 open-source tool that finds malicious packages, known vulnerabilities, risky GitHub Actions workflows and lockfile tampering, with CEL policy as code.
KKodus
Kodus is an open-source AI code review agent you can self-host with the LLM of your choice, reviewing pull requests on GitHub, GitLab, Bitbucket, Azure DevOps and Forgejo with plain-language Kody Rules and a local CLI.
QQodo
Qodo is an enterprise AI code review and quality platform with multi-agent PR review, self-learning rules, cross-repo impact analysis, a software map and a CLI toolbox that gives coding agents a quality counterpart.
Ccubic
cubic is an AI code reviewer that checks every pull request against your whole codebase and team rules, flags cross-repo breakage, auto-approves safe changes and runs background agents that hunt and fix bugs.
B Baz
Baz is an AI code review platform with custom review agents, a Verification Agent, Fixer, Advanced Security and AI SRE, priced per active developer with 50 reviews included.
DDetail
Detail is a background bug-finding service that exercises your code to find thousands of potential bugs, picks the top 1% you are most likely to care about and fixes them for you.
EEntelligence
Entelligence combines AI code review that learns from your team's mistakes with a model router and agent insights, building a unified memory of sessions, PRs, deploys and incidents.
HHaystack
Haystack gives your coding agent hundreds of forked copies of your app, each seeded like a real customer journey learned from production traffic, and runs every affected case with and without the change.
MMacroscope
Macroscope reviews every code change for correctness, security, tests and regressions, provides status updates across repos and teams, and is adding Murmur cloud agents that verify their work in sandboxes.
OOpslane
Opslane runs your app on every pull request with test versions of its services and finds bugs that only appear at runtime, such as failed payments, concurrent requests and restarts mid-job.
OOptibot
Optibot by Optimal AI performs deep AI code reviews with full multi-repo context, fixes CI failures, bundles dependency updates and includes an AppSec agent, priced per user.
PPropel
Propel is an AI tech lead that reviews pull requests by understanding your architecture, codebase and policies, aiming for high-signal comments, with security scanning tiers and a 30-day free trial.
SStage
Stage is a code review tool that turns each pull request into a story with chapters, explaining why the change exists, its root cause and key changes, to help humans review AI-written code.
PPydantic Logfire
Pydantic Logfire is an OpenTelemetry-based observability and evaluation platform from the Pydantic team, with an MIT-licensed SDK, Python-centric insights, SQL queries and tracing for LLM apps and agents.
OOneUptime
OneUptime is an open-source platform combining uptime monitoring, status pages, incidents and on-call, logs, metrics and traces, with an AI agent that posts root-cause analyses and can open fix pull requests.
Oopenstatus
openstatus is an AGPL-3.0 open-source status page, incident response and global uptime monitoring platform built for infrastructure as code, with YAML or Terraform config, a JSON CLI, an MCP server and monitors in 28 regions.
HHealthchecks.io
Healthchecks.io is a BSD-licensed open-source cron job monitoring service that alerts you when scheduled tasks, backups and background jobs fail to ping on time, available hosted or self-hosted.
PParseable
Parseable is an AGPL-3.0, Rust-based open-source observability data lake that stores logs, metrics and traces as Parquet on object storage, with alerting, dashboards, anomaly detection, APM, PromQL and SQL in a single binary.
HHyperDX
HyperDX, now part of ClickHouse and developed in the ClickStack repository, is an MIT-licensed open-source observability UI that unifies session replays, logs, metrics, traces and errors on top of ClickHouse and OpenTelemetry.
SSubtrace
Subtrace is a BSD-licensed network inspector for backends that captures every HTTP request and response in any server with a single command, like a browser's network tab for your API.
DDash0
Dash0 is an OpenTelemetry-native observability platform with logs, traces, metrics, profiling, synthetic API checks and session replays, plus AI agents that watch coding agents and fix production problems.
MMiddleware
Middleware is a full-stack observability platform covering infrastructure, APM, logs, RUM, synthetics and browser tests, with an AI SRE agent (OpsAI) that detects and helps resolve issues.
SSazabi
Sazabi is an AI-native observability and security platform that connects production logs with code, detects important issues without hand-built monitors, investigates root causes and feeds context to coding agents.
SSuperlog
Superlog is monitoring for the AI era: it finds missing logs and traces, captures browser exceptions with source maps, and uses an MCP server and automations so coding agents add alerts, synthetic tests and fixes.
HHyperProbe
HyperProbe works production incidents for you, from alert to confirmed root cause, by letting your coding agent place temporary, rate-limited probes in running code through an MCP server.
OOdigos
Odigos is a production context platform that uses eBPF to record what runs inside every service with no code changes, generating OpenTelemetry data and letting AI agents dynamically collect missing evidence.
AApitally
Apitally is simple API monitoring and analytics for popular web frameworks: add a few lines of code to track traffic, errors, performance, consumers, request logs and alerts.
CCronitor
Cronitor monitors cron jobs, scheduled tasks, heartbeats, websites, APIs and agents with status pages, web analytics and synthetic browser checks, priced per monitor and per user.
HHyperping
Hyperping is an uptime monitoring and status page platform with Playwright browser checks, cron, SSL and server monitoring, logs, on-call and incident management.
TTUnit
TUnit is a modern MIT-licensed .NET testing framework built on Microsoft.Testing.Platform that discovers tests at compile time with source generators, runs them in parallel by default and supports Native AOT.
VVerify
Verify is an MIT-licensed .NET snapshot testing tool that serialises test results to files named after the test and fails when the next run's snapshot differs, with an Open Source Maintenance Fee for revenue-generating organisations from September 2026.
A AwesomeAssertions
AwesomeAssertions is an Apache-2.0, community-controlled fork of FluentAssertions for .NET, offering an extensive set of fluent extension methods for TDD and BDD-style unit tests.
FFakeItEasy
FakeItEasy is an MIT-licensed .NET dynamic fake library for creating fakes, mocks and stubs with a context-aware fluent interface, compatible with C# and VB.NET.
JJapa
Japa is an MIT-licensed testing framework for Node.js backend applications and libraries, with plugins for JSON API tests against OpenAPI schemas and browser tests with Playwright.
MMaelstrom
Maelstrom is an Apache-2.0 suite of test runners for Rust, Go and Python that runs every test in its own micro-container, locally or distributed across a cluster, as drop-in replacements for cargo test, go test and pytest.
PPBT (Ruby)
PBT is an MIT-licensed property-based testing library for Ruby with experimental parallel execution of test cases using Ractor.
QQuick
Quick is an Apache-2.0 behaviour-driven development framework for Swift and Objective-C, paired with the Nimble matcher library for expressive expectations.
EEarlyAI
EarlyAI (Early) finds bugs, including security defects and regressions, before release and creates Fix PRs with tests, giving QA evidence to decide what ships.
RRoostGPT
RoostGPT from Roost.ai is an enterprise AI quality engineering platform that turns requirements, code, APIs and UI flows into maintained test assets, auditable coverage and release-readiness intelligence.
SSilogy
Silogy's Viv is an on-premise AI verification engineer for chip design that autonomously debugs failing tests using code, log files, waveforms and a knowledge base.
CCodSpeed
CodSpeed is a continuous performance testing platform that runs benchmarks in CI with under 1% variance, shows AI-enhanced differential flamegraphs on pull requests, gates regressions and uses an Optimization Agent to open fix PRs.
BBencher
Bencher is an open-source continuous benchmarking platform that runs, tracks and catches performance regressions, with Bencher Bare Metal runners that give identical hardware from your terminal, an agent sandbox or CI.
GGoogle Benchmark
Google Benchmark is Google's Apache-2.0 C++ microbenchmarking library that lets you register benchmark functions like unit tests, with argument ranges, complexity estimates, multithreading and JSON output.
C Criterion.rs
Criterion.rs is a statistics-driven Rust microbenchmarking library, a port of Haskell's Criterion, that stores results between runs to detect regressions and measure optimisations; development has moved to a new criterion-rs organisation.
DDivan
Divan is an Apache-2.0 Rust benchmarking library offering "comfy" benchmarking with a simple attribute API, multiple cases per benchmark and readable tabular output of fastest, slowest, median and mean times.
Ppytest-benchmark
pytest-benchmark is a BSD-licensed pytest plugin providing a benchmark fixture that calibrates rounds automatically, compares runs and can fail tests on performance regressions.
TTinybench
Tinybench is a tiny MIT-licensed JavaScript benchmarking library built on Web APIs that runs in multiple runtimes and reports statistically analysed latency and throughput.
LLoadFocus
LoadFocus is a cloud testing platform for load testing (including JMeter and k6 scripts from 25 cloud regions), page speed monitoring, synthetic, API, uptime and RUM monitoring, with AI-powered load test analysis.
LLoadster
Loadster is a cloud load testing platform that runs Playwright scripts, real headless Chrome Browser Bots or lightweight Protocol Bots from 32 AWS and GCP regions, reusing scripts for synthetic monitoring.
SSpeedVitals
SpeedVitals runs page speed tests from 30+ locations and devices, measures Core Web Vitals and TTFB from 40 locations, supports bulk tests and alerts, and added real user monitoring.
CCalibre
Calibre combines real user monitoring, Google CrUX Core Web Vitals data and scheduled synthetic page speed tests to show when pages slow down and what to fix.
TTreo
Treo combines the Chrome UX Report and Lighthouse in one interface to track, analyse and optimise Core Web Vitals across sites and thousands of URLs with zero configuration.
S Scalar
Scalar is an MIT-licensed open-source API platform built around OpenAPI: an interactive API reference with generated code examples, an offline-first API client and hosted docs, now positioned as infrastructure for APIs in the age of agents.
VVoiden
Voiden is an Apache-2.0, offline, Git-native API workspace where requests, tests and docs live in plain-text .void Markdown files built from reusable blocks, with no accounts, telemetry or cloud lock-in.
SSlumber
Slumber is an MIT-licensed terminal HTTP client with a TUI and CLI, where request recipes live in a YAML collection you can commit, chain and parameterise with profiles.
SSparrow
Sparrow is an AGPL-3.0 open-source API testing app and Postman alternative for testing, debugging and sharing APIs with collaboration features, available as desktop and web apps.
XXplorer
Xplorer by Karate Labs is a local-first API workbench that opens OpenAPI specs and Postman collections, runs requests with no sign-in and exports them to Karate feature files.
MMCP Inspector
MCP Inspector is the official Model Context Protocol developer tool for inspecting MCP servers, shipping web UI, CLI, TUI and an experimental mcpdo connection client in one npm package.
MMCPJam Inspector
MCPJam is an open-source testing and evaluation platform for MCP servers: inspect tools and OAuth flows, test widgets for ChatGPT apps, run cross-client evals across 16 client configurations and 170+ models, and gate regressions in CI.
AAgent Scan (mcp-scan)
Agent Scan, formerly mcp-scan and now from Snyk, is an Apache-2.0 tool that discovers agent harnesses, MCP servers and skills on your machine and scans them for prompt injections, sensitive data handling and hidden malware.
TTestDino
TestDino is a Playwright cloud companion that records CI runs with git context, detects flaky tests, keeps traces and fix workflows, and exposes results to AI agents over MCP.
TTestFiesta
TestFiesta is a flexible test management platform with built-in bug tracking, a TacoTruck CLI for CI result ingestion, Jira and GitHub integrations and one flat $10 per user plan.
QQA Sphere
QA Sphere is a lean test management system: build a test case library, plan runs from it, track results and testers, with AI-assisted test creation.
Qqarunbook
qarunbook helps you create a clear test plan for web, Android and iOS apps, work through it yourself, with your team or with AI via MCP, and track what needs fixing or re-checking.
BBugasura
Bugasura is a free bug tracking and test management platform with AI "Asura" agents that ingest your docs and context to drive quality within an AI development lifecycle.
M Mergify
Mergify provides a merge queue that tests pull requests together and isolates bad ones quickly, plus Test Engine to stop flaky tests failing builds, CI insights and workflow automation for GitHub.
AAviator
Aviator routes each PR to the right reviewer, runs deterministic verification against the original intent (Aviator Verify), and merges and deploys without breaking main at agent-scale volume.
HHarden-Runner
Harden-Runner by StepSecurity is an Apache-2.0 GitHub Action that adds network egress monitoring and blocking, file integrity and process monitoring to CI/CD runners, detecting supply chain attacks such as the tj-actions compromise.
Ppoutine
poutine by BoostSecurity is an Apache-2.0 scanner that detects misconfigurations and vulnerabilities in GitHub Actions and GitLab CI pipelines, for one repo or a whole organisation.
LLefthook
Lefthook is a fast, MIT-licensed Git hooks manager written in Go by Evil Martians, running commands in parallel on staged files for Node.js, Ruby, Python and other projects.
DDatafold
Datafold is a data quality platform that compares datasets within or across databases with value-level precision, adds ML-driven monitoring, and offers AI agents for migrations, optimisation and data code reviews.
EElementary
Elementary OSS is an Apache-2.0 dbt-native data observability CLI that works with the Elementary dbt package to generate observability reports and send alerts to Slack and Microsoft Teams, with Elementary Cloud for scale.
RRecce
Recce is an Apache-2.0 tool that helps dbt teams preview, validate and ship data changes by comparing environments with lineage, data diffs and impact checks, locally or in Recce Cloud.
PPointblank
Pointblank is an MIT-licensed Python data validation library from Posit that checks Polars, Pandas, database and PySpark tables against a validation plan and produces shareable reports.
SSa11y
Sa11y is a GPL-2.0, framework-agnostic JavaScript accessibility quality assurance assistant that visually highlights 80+ common content accessibility and usability issues for content authors, with tooltips explaining how to fix them.
GGuidepup
Guidepup is an MIT-licensed screen reader automation library that drives NVDA on Windows, Orca on Linux and VoiceOver on macOS through one JavaScript API, so you can assert on what screen reader users actually hear.
A Alfa
Alfa is Siteimprove's MIT-licensed open accessibility conformance testing engine that tests HTML, CSS and JavaScript sites against WCAG using ACT rules, distilled from Siteimprove's proprietary engine.
SSilktide
Silktide tests every page and PDF for content, accessibility, user experience and compliance, prioritises fixes, connects analytics and heatmaps, and tracks how AI assistants describe your brand.
TTestParty
TestParty automatically scans and fixes source code to make websites and media more accessible, supplementing manual audits, with a focus on Shopify and ecommerce brands.
UUxia
Uxia runs AI user tests with synthetic testers matched to your audience, combined with human testers in one report, to find UX friction in designs and live flows in minutes.
SSynthetic Users
Synthetic Users simulates how any audience thinks, decides and reacts, letting you test a product, message or policy with AI synthetic respondents in minutes.
BBallpark
Ballpark is a consumer, brand and product research platform with access to over 3 million participants and answers within 60 minutes, priced from $1 per credit or minute.
UUserbrain
Userbrain is a remote user testing platform with a quality-assured tester pool, screening, shareable test links and AI-generated tasks and insights, starting at $49 a month.
K Keak
Keak is an AI conversion optimisation tool that scans your page, generates variants, sets up A/B experiments and helps ship the winner toward a goal you set.
VVizDiff
VizDiff automatically captures screenshots of your Storybook components in GitLab CI and shows visual diffs in merge requests, to stop visual regressions before production.
Ttestmail.app
testmail.app provides unlimited test email addresses and mailboxes via JSON and GraphQL APIs, receiving, parsing, spam-testing and indexing emails for automated end-to-end tests.
LLocalStack
LocalStack is a cloud service emulator that runs AWS (120+ services) in a single container on your laptop or in CI, with Snowflake emulation and an Azure public preview; the original open-source repository is now archived in favour of a unified image.
GGauge
Gauge is an Apache-2.0 open-source acceptance test automation framework (copyright ThoughtWorks) with Markdown specifications, multi-language step implementations and Taiko browser automation; it is now community-maintained.
HHilstart
Hilstart runs autonomous agents that validate real electronics hardware, grounded in your schematic, layout and requirements, executing approved test limits through its Tracer and capturing waveforms, logs and reports.