PPostman
Go faster from development to production with higher accuracy and fewer tokens.
CheckOps
Tools Directory
Tools, tech and trends for continuous quality, for humans and agents.
Curated collection of top software testing tools. Search, filter, compare two to four, and refresh public signals. Or browse by lifecycle stage.
License
Showing 454 tools
- P
SSoapUI
SoapUI is a free and open source cross-platform functional testing solution for APIs and web services.
HHoppscotch
Open-Source API Development Ecosystem • https://hoppscotch.io • Offline, On-Prem & Cloud • Web, Desktop & CLI • Open-Source Alternative to Postman, Insomnia.
T Tuskr
Flexible test management with features for planning, executing, and analyzing test cases.
TTestRail
TestRail is AI-driven test management software for planning, executing, and reporting on testing.
A AccelQ
AccelQ is a premium testing tool offering comprehensive automated, performance, and security testing features, seamlessly integrating for Web,API and Mobile with CI/CD pipelines
BBruno
Opensource IDE For Exploring and Testing API's (lightweight alternative to Postman/Insomnia).
PPerfecto
A cloud-based test automation platform for mobile and web applications, providing real device testing.
B Beeceptor
Create AI-powered mock servers in seconds.
IInsomnia
The open-source, cross-platform API client for GraphQL, REST, WebSockets, SSE and gRPC.
RReadyAPI
The number one platform for Agile and DevOps teams, ReadyAPI powers functional, security, performance, and virtualization of SOAP & REST APIs.
TThunderclient
A Lightweight Rest Client for testing APIs. Supports collections, environments, git collaboration and local storage.
SSwaggerUI
Swagger UI is a collection of HTML, JavaScript, and CSS assets that dynamically generate beautiful documentation from a Swagger-compliant API.
KKarate
Test Automation Made Simple.
KKatalon Studio
Start API testing from today with Katalon.
DDredd
Language-agnostic HTTP API Testing Tool.
CCitrus
Framework for automated integration tests with focus on message-based applications.
HHTTPie
🥧 HTTPie CLI — modern, user-friendly command-line HTTP client for the API era.
AAPI Fortress
A comprehensive and user-friendly tool for API testing, offering extensive features like a visual test composer, end-to-end testing, and strong CI/CD integration.
AAssertible
Continuously test your web services.
PPaw (RapidAPI)
RapidAPI for Mac is a full-featured and beautifully designed Mac app that makes interaction with REST services delightful.Whether you are an API maker or consumer, RapidAPI…
SSelenium
A browser automation framework and ecosystem.
PPlaywright
Playwright is a framework for Web Testing and Automation.
CCypress
Fast, easy and reliable testing for anything that runs in a browser.
NNightWatchJS
Integrated end-to-end testing framework written in Node.js and using W3C Webdriver API.
C Capybara
Acceptance test framework for web applications.
PProtractor
E2E test framework for Angular apps.
TTestCafe
A Node.js tool to automate end-to-end web testing.
WWebDriverIO
Next-gen browser and mobile automation test framework for Node.js.
PPuppeteer
JavaScript API for Chrome and Firefox.
W Watir
An open source Ruby library for automating tests.
SSelenium IDE
Open Source record and playback test automation for the web.
P PyRestTest
YAML based api testing and API microbenchmarking tool in Python
AAppium
Cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol.
D Detox
Gray box end-to-end testing and automation framework for mobile apps.
TTestComplete Mobile
Create and run automated UI tests on any mobile application using our automated mobile testing tool, TestComplete.
RRanorex Studio
Test automation for desktop, web, and mobile apps.
RRobot Framework
Generic automation framework for acceptance testing and RPA.
XXCUITest
A test automation framework for iOS applications, part of the XCTest framework.
EEspresso
Espresso is an Android testing framework for writing concise, beautiful, and reliable UI tests that synchronize automatically with the application's UI.
UUFTOne
UFT One is a functional testing tool that supports scriptless test creation for web, mobile, API, and desktop applications.
CCalabash
An open-source automated testing librasry in Ruby for Android and iOS native and hybrid applications.
S Selendroid
"Selenium for Android" (Test automate native or hybrid Android apps and the mobile web with Selendroid.) Join us on IRC #selendroid on freenode.
WWireMock
A tool for mocking HTTP services.
KK6
k6 is an open-source tool and cloud service that makes load testing easy for developers and QA engineers.
AArtillery
The complete load testing platform.
LLoadRunner
A performance testing tool by Micro Focus, which provides a comprehensive solution for testing the performance of a wide range of applications.
PPactFlow
Fast, easy, and reliable testing for your APIs and microservices at scale.
GGatling
Modern Load Testing as Code.
PPact
Fast, easy and reliable testing for integrating web apps, APIs and microservices.
TTosca API Test
Tosca’s API Scan allows teams to easily create, manage, and execute automated API tests with a simple, no-code solution that literally anyone can use and adopt
AApiary
Apiary provides the leading API-First platform designed specifically to help companies accelerate and control the design, development, and documentation of APIs.
KKeploy
Keploy is developer-centric API testing tool that creates tests along with built-in-mocks, faster than unit tests.
RRestQA
🦏 | Best in class Microservice automation testing.
D DeepFake HTTP
DeepfakeHTTP is a web server that uses HTTP dumps as a source for responses. This tool allows you to test clients against REST, GraphQL, and other APIs.
RRunScope
API performance monitoring.
SSuperTest
Developer-friendly tool for testing Node.js HTTP servers and APIs
TTestComplete
TestComplete offers a range of powerful features to help you scale your automated ui testing efforts and maximize test coverage.
AAirbone
Airborne is an API automation testing tool built on the Ruby RSpec framework
FFiddler
Explore Fiddler's web debugging tools and proxy solutions to debug, mock, capture, and modify web and network traffic.
RRestSharp
Simple REST and HTTP API Client for .NET.
BBlazeMeter
Unify performance testing, API testing and monitoring, service virtualization, AI-powered test data, and functional testing in one platform.
JJMeter
Apache JMeter open-source load testing tool for analyzing and measuring the performance of a variety of services.
NNeoLoad
Neoload is a performance testing platform that simulates high user loads to identify and fix performance bottlenecks.
AApica
Apica is the agentic-ready telemetry pipeline that cuts observability costs up to 40%.
LLoadNinja
The only load testing tool to record, replay, and test in real browsers at scale.
L Locust
Write scalable load tests in plain Python 🚗💨.
WWebLOAD
Learn more about WebLOAD load testing tool by RadView.
LLoadium
Loadium is a performance and load testing tool that executes performance tests from open source tools, including JMeter, Gatling, and Selenium
L LoadView
A cloud-based load testing tool that allows you to create and execute performance tests for your web applications and APIs.
RRedLine13
RedLine13 gives you "almost" free load testing in the cloud.
LLoader.io
Free tool for web application load testing that allows for the simulation of concurrent connections to your web application's APIs.
T Taurus
Automation-friendly framework for Continuous Testing by.
AApache Benchmark
A command-line tool for measuring the performance of HTTP web servers, useful for testing the performance of your Apache installations.
S Siege
Siege is an http load tester and benchmarking utility.
V Vegeta
HTTP load testing tool and library.
T Tsung
A multi-protocol distributed load testing tool that can be used to stress test HTTP, WebDAV, SOAP, PostgreSQL, MySQL, and more.
O OWASP ZAP
The ZAP by Checkmarx Core project.
QQualys
Discover how Qualys helps your business measure & eliminate cyber threats through a host of cybersecurity detection & remediation tools.
BBurp Suite
PortSwigger offers tools for web application security, testing, & scanning.
RRoboHydra HTTP
RoboHydra Server is a great API testing solution for those who don’t have access to a server but need to test something.
NNessus
Find out more about Nessus - the trusted gold standard for vulnerability assessment, designed for modern attack surfaces - used by thousands of organizations.
A AppSpider
A dynamic application security testing tool with API security features.
LLeapwork
Unite Enterprise Playwright, AI test automation, and performance testing with the governance enterprises need to trust software delivery.
MMicro Focus Fortify
A suite of tools for application security, including API security testing.
HHttpMaster
Practical and easy-to-use software tool for testing HTTP applications and services.
KKatalon Studio TrueTest
Katalon True Platform is the AI testing platform for QA teams.
TTricentis Tosca
A continuous testing platform that supports scriptless test automation for web, mobile, API, and enterprise applications.
PParasoft SOAtest
Optimize API and web service testing with AI-enhanced SOAtest.
RRanorex Studio
Test automation for desktop, web, and mobile apps.
EEggplant Functional
A test automation tool that provides scriptless testing solutions for web, mobile, and desktop applications.
TTestComplete
Test Mobile, Web and Desktop applications.
AApplitools
Applitools is an AI-powered end-to-end testing platform that combines our proven Visual AI with the latest GenAI and no-code approaches to maximize your test coverage while…
SScriptless
A test automation platform that provides scriptless test creation for web applications.
UUFT One
A functional testing tool that supports scriptless test creation for web, mobile, API, and desktop applications.
ZZebrunner
Synchronize manual and test automation teams in one place.
AAutify
Autify's AI-powered Quality Engineering Platform provides AI-powered product and quality assurance professionals to streamline your software testing process and boost the…
TTestim
Testim is an automated testing platform for fast authoring of AI-powered stable tests and tools to help you scale quality.
FFunctionize
Builds, runs, and maintains tests against your live application.
MMabl
The #1 agentic testing platform empowering software teams to accelerate releases, ensure software quality, and deliver exceptional user experiences.
GGhost Inspector
Ghost Inspector is a no-code automated browser testing platform.
P ProdPerfect
Everyone plans to succeed.
TTestsigma
Agentic test automation that generates, runs, heals, and diagnoses tests then scores your release confidence.
TTestArchitect
Empower your team with TestArchitect: unified, no-code, AI-powered automation, API, and database testing.
ZZeuz
ZeuZ Test Studio is an AI test automation platform that writes, runs and repairs tests across web, mobile, desktop and API.
AAcunetix
Invicti Web + API is an end-to-end web security scanner that offers a 360 view of an organization’s security.
PParasoft SOAtest
Optimize API and web service testing with AI-enhanced SOAtest.
ZZato API Test
With Zato API Test, you can test APIs in plain English, without any programming
U Unirest
Unirest in Java: Simplified, lightweight HTTP client library.
CCurl
A command line tool and library for transferring data with URL syntax, supporting DICT, FILE, FTP, FTPS, GOPHER, GOPHERS, HTTP, HTTPS, IMAP, IMAPS, LDAP, LDAPS, MQTT, MQTTS,…
TTelerek TestStudio
API testing with Test Studio helps you enhance your end-to-end testing strategy to cover test scenarios that require API calls.
RRest-Assured
Java DSL for easy testing of REST services.
B BrowserStack
Instant access to 3500+ browsers and real iOS and Android devices for cross browser testing.
SSauce Labs
Test web and mobile apps on thousands of real devices, browsers, and emulators.
LLambdaTest
Cross-browser testing platform with a scalable cloud infrastructure supporting CI/CD tools.
AAWS Device Farm
AWS Device Farm is an application testing service that allows you to test iOS, Android, and web applications on real smartphones, tablets and desktop web browsers.
ZZephyr
Whether you’re Agile or Waterfall, or somewhere in-between, Zephyr test management solutions support development natively on Jira as well as securely on-premises.
TTestLodge
Simple test case management tool for creating and running test cases with reporting.
HHyperTest
HyperTest is a no-code test automation tool that regresses all your APIs by auto-generating integration tests using your network traffic, also giving a way to reproduce these failures inside actual user-journeys.
XXray
Bring QA and development together in Jira.
UUsetrace
Codeless testing platform for automating web application testing.
CCloudQA
Record, run and maintain end-to-end web tests without writing code.
RRainforest QA
Automate e2e tests without the time-consuming drudgery of test maintenance.
VVirtuoso
Virtuoso QA is an enterprise test automation platform that proves what it tested.
AAvo Assure
Avo Automation helps enterprises assure business-critical processes with Avo Assure - agentic AI, no-code test automation for SAP, Dynamics 365, Oracle, and Salesforce.
OOpkey
Codeless test automation for ERP applications with support for no-code workflows.
KKobiton
Codeless mobile app testing with real device cloud and AI-driven capabilities.
RReflect
SmartBear Reflect helps teams maintain application integrity with AI-powered, codeless web and mobile testing, so your app works the way it.
WWaldo
Codeless mobile app testing with AI-powered visual testing and reporting.
DDoesQA
Automated end-to-end testing for every web journey.
OOxygen
Oxygen is a powerful Selenium & Appium infrastructure for beginners and pros.
RReTest
retest makes GUI test automation software.
EEndTest
Endtest is the agentic AI platform for end-to-end test automation.
TTestRigor
Test automation tool - testRigor.
UUIlicious
Automate UI tests with UI-licious.
DDogQ
No-code test automation tool for end-to-end web tests.
PPreflight
PreFlight is a No-code web testing tool for anyone.
C ClicAutomate
ClicAutomate is built on a script-less test automation approach which expedites automation testing
TTestingWhiz
Experience effective test automation of web & mobile apps with an easy & intuitive codeless end-to-end software testing tool, TestingWhiz.
BBugBug
Cut regression time without growing your QA team.
B BrowserStack Low Code
Create AI-powered automated tests in minutes with our Low Code Automation.
PPingdom
A performance monitoring tool that provides insights into your website's speed, uptime, and user interactions.
BBitBar
Whether web, native, or hybrid, securely test your app across the real environments you need.
HHeadSpin
HeadSpin enables real device testing with AI-driven insights, KPI analysis, and seamless automation across 50+ locations for optimized app performance.
VVisual Studio App Center
Part of Visual Studio App Center for mobile app testing on various real devices in the cloud.
TTestGrid
TestGrid is an end-to-end testing solution powered by AI that simplifies and streamlines the testing process, helping businesses deliver high-quality digital experiences faster.
PPcloudy
Pcloudy is an AI-powered mobile app testing platform with 5,000+ real devices.
EEMAS by Alibaba Cloud
EMAS Mobile Testing is a cloud platform that provides device testing services for enterprises and mobile developers.
T TestLink
Open-source test case management with test execution tracking and reporting capabilities.
PPractiTest
PractiTest is an AI-powered Test Management and QA Intelligence Platform that turns QA data into business answers.
K Kualitee
Test case management tool from $12/user with AI test generation, defect tracking, and Jira integration built in.
QQMetry
Accelerate releases with AI-powered test management.
AAqua
Transform QA with aqua cloud's AI-driven test management platform.
TTestiny
AI-ready test management tool for teams who want manual and automated testing in one system, their preferred AI assistant, and EU cloud or self-hosting.
Q Qase
Cloud-based test case management with test planning, execution, and defect tracking.
SSpiraTest
Manage your project's requirements, test cases and bugs.
TTestpad
Checklists-inspired test management for manual and exploratory testing, Agile-friendly.
RReQtest
Med Reqtest är det enkelt att lyckas med IT-projektet.
TTestMonitor
TestMonitor is a simple, intuitive test management software platform built for enterprise software, quality app development, and other important testing needs.
AApplause
Applause is a managed software testing services provider enabling enterprises to deliver high-quality apps, websites and AI experiences worldwide.
TTricentis qTest
Supports Agile and DevOps workflows, allowing centralized management of test cases.
BBugzilla Testopia
Extension for Bugzilla to provide basic test case management features.
IIBM Rational Quality Manager
Test case management solution with collaborative features for Agile teams.
SSmartBear Test Management
Tool that includes test planning, test case management, and reporting tools.
HHelix TCM
Allows creating and organizing test cases, linking them to requirements for traceability.
JJama Connect
Accelerate complex product development with an AI-powered engineering and requirements management platform that improves collaboration, traceability, quality, and compliance.
TTestmo
Modern test management software tool that fully integrates your test cases, test automation and exploratory testing, regardless of the tools you use.
CCucumberStudio
CucumberStudio gives your team the platform to succeed with BDD.
TTest Collab
Web-based test management tool with real-time reporting, JIRA integration, and REST API support.
K Klaros-Testmanagement
Test case management tool supporting Agile methods with reporting and CI/CD integration.
EEasyQA
Cloud-based test management tool for organizing test cases, running tests, and tracking bugs.
TTyk
Open Source API and AI Gateway supporting REST, GraphQL, TCP, gRPC and MCP (Model Context Protocol).
VvRest
An effective online tool for automated REST API Testing.
AAPITest
A simple and extensible behavioural testing library for Go.
FFrisby
Frisby is a REST API testing framework built on Jest that makes testing API endpoints easy, fast, and fun.
R RestCase
RestCase supercharges the API development process resulting in improved team collaboration, reduced development time, better testing and increased overall productivity.
NNock
HTTP server mocking and expectations library for Node.js.
MMicrocks
Microcks is Open Source cloud-native tool for API Mocking and Testing.
TTestMace
Your IDE for working with an API.
AApickli
Test framework for behavior-driven API testing.
TTrafficParot
Mock API server and message broker for TDD and API Testing
IImposter
Scriptable, multipurpose mock server.
SStoplight Prism
Accelerate API development with realistic mock servers powered by API descriptions.
MMirageJS
A client-side server to build, test and share your JavaScript app.
HHoverfly
Lightweight service virtualization/ API simulation / API mocking tool for developers and testers.
Q QuickMocker
API mocking and request inspection tool for development and testing.
JJSON Server
Quickly mock a REST API with JSON files.
MMockLab
Platform for creating, testing, and sharing HTTP mock servers.
MMockoon
Mockoon is the easiest and quickest way to run mock APIs locally.
MMockServer
Open-source HTTP/1.1, HTTP/2, HTTP/3, HTTPS and gRPC mock server, recording proxy, and MCP server for AI assistants.
MMockAPI
MockAPI is a simple tool that lets you easily mock up APIs, generate custom data, and perform operations on it using RESTful interface.
MMetasploit
Find security issues, verify vulnerability mitigations & manage security assessments with Metasploit.
NNikto
Nikto web server scanner.
KKaneAI
KaneAI is TestMu AI's AI testing agent that turns natural-language instructions into end-to-end web and mobile tests, with auto-heal, code generation and cloud execution.
SSQLMap
Automatic SQL injection and database takeover tool.
WWfuzz
Wfuzz has been created to facilitate the task in web applications assessments and it is based on a simple concept: it replaces any reference to the FUZZ keyword by the value…
N Nmap
Nmap - the Network Mapper.
O OpenVAS
Framework for vulnerability scanning and management.
AAstra
Astra Security is a one of a kind AI powered automated Pentest Platform that makes chaotic pentests a breeze & continuous with its hacker-style vulnerability scanner.
KKali Linux
Home of Kali Linux, an Advanced Penetration Testing Linux distribution used for Penetration Testing, Ethical Hacking and network security assessments.
W Wapiti
Wapiti is a free and open-source web application vulnerability scanner (DAST).
A Aircrack-ng
WiFi security auditing tools suite.
VVeracode
Manage application security risks effectively with Veracode's Application Risk Management platform, built for today's AI-driven world.
SSnyk
Snyk CLI scans and monitors your projects for security vulnerabilities.
WWebInspect
Dynamic application security testing tool for identifying vulnerabilities in web applications.
IImmuniWeb
AI-driven platform for application security testing and monitoring.
IInvicti (formerly Netsparker)
Web vulnerability scanner for automated detection of security issues in web applications.
CCobalt Strike
Adversary simulation tool for red team operations and security assessments.
CCheckmarx
Checkmarx agentic application security software platform Combines Hybrid scanning, AI-powered agents, and unified risk intelligence across every attack surface.
DDetectify
Find what's exposed and fix what matters, before attackers do.
BBurp Collaborator
Burp Collaborator is a network service that enables you to detect invisible vulnerabilities.
BBlack Duck
Black Duck delivers True Scale Application Security — SAST, SCA, DAST, and AI-powered AppSec — to help security and development teams detect vulnerabilities, manage open…
AArachni
Web Application Security Scanner Framework.
SSonarQube
Modernize your AI workflows with code verification for the agentic era.
DDependency-Check
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
P Probely
Web vulnerability scanner designed for continuous security testing.
NNetsparker Cloud (Invicti)
Cloud-based security testing tool for automated web vulnerability scanning.
CCodeScan
AutoRabit CodeScan™ secures and optimizes your Salesforce DevOps pipeline by providing real-time static code analysis and continuous compliance.
CCodified Security
Security testing for mobile applications with continuous integration support.
BBeagle Security
The AI-powered AppSec platform that identifies vulnerabilities with comprehensive penetration tests and provides actionable remediation insights.
GGoogle Nogotofail
Security testing tool for networks, focusing on detecting traffic interception vulnerabilities.
P Paros Proxy
Reviews, ratings, and information about Paros proxy: web proxies, web vulnerability scanners,.
BBugzilla
The software solution designed to drive software development Bugzilla lets you plan, organize and release software on your own teams.
JJIRA
Jira brings teams together to reach the next level of productivity with AI agents that orchestrate, plan, and track projects at scale.
M MantisBT
Mantis Bug Tracker (MantisBT).
ZZoho Bug Tracker
Zoho BugTracker is an online bug tracker and issue tracking software that helps you to track and fix bugs quickly.
BBacklog
Backlog is the all-in-one SaaS for all your project management software needs.
RRedmine
Mirror of redmine code source - Official Subversion repository is at https://svn.redmine.org/redmine - contact: @vividtone or maeda (at) farend (dot) jp.
BBugHerd
BugHerd makes it easy for clients to give website feedback and bug reports.
MMarker
Collect website feedback and report website bugs to Jira, Trello, Asana, and GitHub directly from your site with our design feedback software.
RRetina CS (BeuyondTrust)
Network security assessment tool with centralized vulnerability management features.
MMonday
Get more work done with AI agents that work side by side with your people.
CClickUp
Our mission is to make the world more productive.
GGoogle PageSpeed Insights
A tool that analyzes the content of a web page and provides suggestions to make that page faster.
G GTmetrix
A website performance testing tool that provides insights into how well your site loads and offers actionable recommendations.
W WebPageTest
An open-source tool that allows you to run performance tests on your website using real browsers at real consumer connection speeds.
LLighthouse
Automated auditing, performance metrics, and best practices for the web.
Y YSlow
YSlow analyzes web pages and suggests ways to improve their performance based on a set of rules for high performance web pages.
NNew Relic
New Relic is an AI-powered observability platform that correlates your telemetry across your entire stack, so you can isolate the root cause and reduce MTTR.
SSiteSpeed.io
sitespeed.io is an open-source tool for comprehensive web performance analysis, enabling you to test, monitor, and optimize your website’s speed using real browsers in various…
DDareBoost
All-in-one service for website speed test, web performance monitoring and website analysis (speed, SEO, quality, security).
UUptrends
Monitor web and API user journeys from 230+ ISP-based locations worldwide and feed outside-in synthetic insights into your open observability platform.
DDotcom-Monitor
Website monitoring that catches downtime before customers do.
SSucuri Load Time Tester
A tool that measures your website's load time from multiple locations around the globe.
KKeyCDN
Single asset performance test from multiple locations.
UUpzilla
Monitor website uptime, performance, availability monitoring and server uptime/downtime checks from multiple locations.
SSematext
IT system monitoring and management tools for DevOps who need 24x7 live visibility into their infrastructure.
MMonitis
A website performance monitoring tool that provides real-time performance metrics and alerts.
DDebugBear
Monitor website performance and Google Core Web Vitals with synthetic tests and real user monitoring (RUM).
IInstana
IBM Instana Observability provides real‑time application insight that traces requests, detects issues across the full application stack and speeds problem resolution.
MMonkeyTest
MonkeyTest agents use your site like a real user to find bugs, report them, and verify them once fixed.
JJest
Jest is a free, open-source JavaScript test runner with zero-config defaults, mocks, and snapshot testing.
VVitest
Vitest is a free, open-source unit test runner that reuses a Vite project's config, transforms, and plugins.
P pytest
pytest is the usual Python test runner: plain asserts, fixtures, parametrization, and a large plugin set.
JJUnit 5
JUnit 5 is the current JUnit for Java and the JVM: Jupiter for new tests, Platform to launch them, Vintage to run JUnit 4.
MMaestro
Maestro is a YAML UI test runner for Android, iOS, and web. The CLI is free and open source; Maestro Cloud is paid.
PPercy
Percy is BrowserStack's visual testing service. SDKs upload screenshots from your tests; reviewers accept or reject the diff.
CChromatic
Chromatic publishes Storybook and snapshots UI for visual review. The capture service is paid after a free monthly snapshot allowance.
AAllure Report
Allure Report turns test results from many frameworks into one HTML report. The report tool is free and open source.
RReportPortal
ReportPortal is an open-source test-results server with live reporting, failure analysis, and dashboards. Hosted support is paid.
CCurrents
Currents is a paid CI dashboard for Playwright and a few other runners: traces, flake detection, and test orchestration.
Aaxe-core
axe-core is Deque's open-source accessibility rules engine. It checks rendered HTML and reports WCAG violations as JSON.
PPa11y
Pa11y is a free, open-source command-line accessibility checker. It opens a URL in a headless browser and reports rule failures.
CCucumber
Cucumber is the open-source BDD tool that runs Gherkin feature files against step definitions. It is not CucumberStudio.
TTestcontainers
Testcontainers starts throwaway Docker containers from tests so integration tests can use real databases, brokers, and browsers.
SSentry
Sentry groups application errors and traces them across services. The hosted product has a free developer plan and paid team plans.
DDatadog
Datadog is a commercial cloud platform for metrics, traces, logs, and security signals. Products are priced separately.
G Grafana
Grafana is an open-source dashboard for metrics, logs, and traces. Grafana Cloud adds a hosted stack with a free tier and paid plans.
OOpenTelemetry
OpenTelemetry is the open standard and toolkit for traces, metrics, and logs. It is free; you still need a backend to store the data.
PPromptfoo
Promptfoo is an open-source CLI for LLM evals and red teaming. The community tool is free; enterprise features are quoted.
DDeepEval
DeepEval is an open-source LLM evaluation library with pytest-style asserts. Confident AI is the optional paid cloud from the same team.
LLangfuse
Langfuse is an open-source platform for LLM traces, prompts, and evals. Self-hosting is free; Langfuse Cloud is paid after a hobby tier.
MMomentic
Momentic tests web, iOS, and Android. Describe a step in plain English and the agent performs it. Tests adapt to small UI changes on their own.
SSemgrep
Semgrep is a fast static-analysis engine with a free open-source CLI and a paid platform for cross-file rules, supply chain, and secrets.
LLaunchDarkly
LaunchDarkly is a commercial feature-flag and experimentation platform. A developer plan is free; production use is metered, not sold per seat.
FFirebase Test Lab
Firebase Test Lab runs Android and iOS tests on Google-hosted devices. It is deprecated and scheduled to shut down on 30 September 2027.
PPlaywright MCP
Playwright MCP is Microsoft's Model Context Protocol server for browser automation, using structured accessibility snapshots.
TTestSprite
TestSprite is an AI testing agent that generates, runs and heals tests against a live app, from a CLI, an IDE MCP server, CI or a dashboard.
QQA Wolf
QA Wolf is a platform of AI testing agents that write, run and maintain end-to-end tests on web, mobile and desktop, billed per run rather than per seat.
BBrowser Use
Browser Use is an open-source, MIT-licensed browser agent that can drive a real browser from natural-language tasks, with a hosted cloud billed by browser-hour rather than a subscription.
RRagas
Ragas is an open-source library for systematically evaluating LLM applications, including RAG systems and agents.
LLangSmith
LangSmith is LangChain's platform for observability and evaluation of LLM applications and agents, including offline and online evals.
CChecksum
Checksum is an AI QA engineer that writes Playwright tests as pull requests in your repo, runs them, and opens healing PRs when the product changes.
MMeticulous
Meticulous records real sessions of a web app and turns them into a self-maintaining suite of visual end-to-end tests that run on every pull request.
QQA.tech
QA.tech runs AI verification agents against a live web or mobile app on every pull request, mapping the app and checking the user journeys a change affects.
SSpur
Spur is an AI QA platform whose agents run exploratory, functional, localization and UI checks on web and native mobile apps, with a focus on e-commerce.
RRanger
Ranger gives coding agents a browser-based verifier: one command tests the feature an agent just built and returns a verdict with screenshots, recordings and traces.
BBug0
Bug0 is a managed AI QA service: a forward-deployed engineer builds self-healing Playwright tests on Bug0's open-source engine and verifies every failure, for a flat monthly fee.
TThunders
Thunders is an AI test-agent platform that builds, runs and maintains end-to-end tests across web, mobile, API, desktop and SAP, with AI personas and an MCP server.
SSkyvern
Skyvern is an AGPL-licensed AI browser-automation agent that completes workflows on any website using vision and LLMs, with a hosted cloud and a self-hostable Docker build.
SStagehand
Stagehand is Browserbase's MIT-licensed SDK for browser agents, mixing Playwright-style code with natural-language act, extract and observe calls and self-healing actions.
TTestDriver
TestDriver runs every pull request in a real desktop sandbox with a vision-based AI QA agent, finds bugs and builds regression tests, including for desktop apps and extensions.
AAlumnium
Alumnium is an MIT-licensed AI test harness: an MCP server for coding agents plus Java, Python and TypeScript libraries that add natural-language steps to Selenium, Playwright and Appium.
MMidscene.js
Midscene.js is an MIT-licensed, vision-driven GUI agent and E2E test framework for web, Android, iOS, HarmonyOS and desktop, with natural-language YAML or JavaScript tests.
AAskUI
AskUI is an agentic test-automation platform from Germany that drives desktop, web, mobile and HMI devices with vision AI, including air-gapped on-premise deployment.
MMobileBoost (GPT Driver)
MobileBoost, maker of GPT Driver, is a mobile test agent that turns pull requests into generated, executed and maintained iOS and Android end-to-end tests with results in CI.
RRevyl
Revyl is a mobile development platform with cloud iOS and Android simulators and AI-driven testing that verifies changes through real user flows from CLI, MCP, CI or API.
DDrizz
Drizz is a vision-AI mobile testing tool for iOS and Android: describe a flow in plain language, and Drizz writes, runs and debugs tests without selectors, billed per executed step.
AArbigent
Arbigent is an Apache-2.0 AI agent testing framework for Android, iOS and web that breaks complex tasks into dependent scenarios, with a UI and a code interface.
SSofy
Sofy is a no-code AI testing platform whose agents write, run and fix tests for mobile, web, SAP and Dynamics 365, with a real-device lab and AI failure analysis.
AAppvance AIQ
Appvance AIQ is an enterprise AI testing platform built on Playwright that generates tests from natural language, executes and governs them, and expands coverage beyond scripted paths.
WWopee.io
Wopee.io runs AI testing agents for web apps that explore, generate, execute, validate and maintain Playwright-friendly tests, with visual testing, an MCP server and self-hosting.
CCARBON by testers.ai
CARBON, from testers.ai, is an AI test-manager agent that lives in your coding agent: 12 free MIT-licensed testing commands, with a paid Pro tier of extra workflows.
CContextQA
ContextQA is an AI QA platform for web, mobile, API, SAP, Salesforce and AI agents that generates, runs and self-heals tests and exposes them to coding agents over MCP.
SShiplight AI
Shiplight AI is an agent-native testing platform: it installs into your coding agent as an MCP server and skills, walks your app in a real browser and writes readable, self-healing tests.
SShortest
Shortest is an MIT-licensed natural-language end-to-end testing framework from Antiwork, built on Playwright and executed by Anthropic's Claude.
VVibium
Vibium is an Apache-2.0 browser automation tool for AI agents, built on WebDriver BiDi, usable as an agent skill, an MCP server or a JS, Python or Java library.
DDiffblue
Diffblue's testing agent orchestrates AI coding tools to generate verified Java regression unit tests at project scale, priced per net new line of coverage; Cover has a Community Edition.
TTusk
Tusk is an AI testing platform that generates unit and API tests from production traffic and business context, self-heals them and reviews PRs as a verification layer for coding agents.
HHealenium
Healenium is an open-source, Apache-2.0 self-healing library for Selenium (with an Appium adapter) that replaces broken locators at runtime using a machine-learning matching algorithm.
EEvoMaster
EvoMaster is an LGPL-3.0 open-source tool that uses AI search techniques to generate system-level tests for REST, GraphQL and RPC APIs, in white-box and black-box modes.
KKushoAI
KushoAI generates API test suites from OpenAPI specs or Postman collections, checks every change against the contract, and adds continuous API security scanning and UI testing.
LLoadmill
Loadmill is an AI verification layer that uses vision-based agents to check AI-built software across UI, API, mobile and performance, with an MCP server for coding agents.
CCopado Robotic Testing
Copado Robotic Testing is a low-code, AI-powered test automation product from Copado, focused on Salesforce and other digital experiences and tied into Copado's DevOps platform.
GGiskard
Giskard offers an Apache-2.0 open-source library for evals, red teaming and test generation for AI agents, plus a commercial Hub for agent red-teaming, evaluation and guardrails.
Ggarak
garak is NVIDIA's Apache-2.0 LLM vulnerability scanner that probes models and dialog systems for hallucination, data leakage, prompt injection, toxicity, jailbreaks and more.
PPyRIT
PyRIT is Microsoft's MIT-licensed Python Risk Identification Tool for generative AI: automated scans, adaptive multi-turn attacks and human-led red teaming in one toolkit.
AArize Phoenix
Arize Phoenix is an open-source (Elastic License 2.0) AI observability and evaluation tool for tracing, evaluating and improving LLM apps and agents, with a hosted Arize AX tier.
BBraintrust
Braintrust is a hosted platform for AI evals and agent observability: trace production, turn patterns into evals, score releases, and query it from your IDE via MCP.
TTruLens
TruLens is an MIT-licensed, OpenTelemetry-native library for tracing and evaluating LLM apps and agents with explainable LLM judges, maintained by Snowflake.
IInspect
Inspect is the UK AI Security Institute's MIT-licensed framework for LLM evaluations, with datasets, solvers, scorers, agents, sandboxed tools and 200+ pre-built evals.
OOpik
Opik by Comet is an Apache-2.0 open-source platform to trace, evaluate and monitor LLM apps, RAG systems and agents, with test suites, LLM-as-judge evals and a free cloud tier.
LLangWatch
LangWatch is an Apache-2.0 open-source platform for agent observability, evals and agent simulation testing, with prompt management, red-teaming and voice-agent testing.
OOpenAI Evals
OpenAI Evals is an MIT-licensed framework and open registry for evaluating LLMs and LLM systems, now complemented by evals in the OpenAI Dashboard.
GGalileo
Galileo is an AI observability and eval engineering platform that builds datasets, tunes evaluation metrics and turns offline evals into production guardrails for AI apps and agents.
HHamming
Hamming tests, red-teams and monitors voice and chat AI agents: simulated calls before launch, failed calls rerun as regression tests, and production monitoring.
CCoval
Coval is a voice AI testing and evaluation platform that simulates conversations, observes production calls and adds human review to make voice agents deployment-ready.
CCekura
Cekura is automated QA for voice and chat AI agents: simulations, evaluations, red-teaming and production call monitoring, with a loop that turns failures into evals and fixes.
CChrome DevTools MCP
Chrome DevTools MCP is Google's Apache-2.0 MCP server and CLI that lets coding agents control and inspect a live Chrome: automation, network and console debugging, and performance traces.
MMobile MCP
Mobile MCP from Mobile Next is an Apache-2.0 MCP server that lets AI agents drive iOS and Android apps on simulators, emulators and real devices through accessibility snapshots or screenshots.
BBrowserStack MCP Server
BrowserStack's official AGPL-3.0 MCP server lets AI assistants manage test cases, run manual and automated tests on BrowserStack, and debug and fix code in plain English.
MMCP Selenium
MCP Selenium is an MIT-licensed MCP server for Selenium WebDriver, by Angie Jones, that lets AI agents automate Chrome, Firefox, Edge and Safari.
AAppium MCP
Appium MCP is the Appium project's Apache-2.0 MCP server for mobile automation, with AI-powered element finding, locator generation and test creation for Android and iOS.
LLighthouse CI
Lighthouse CI is Google Chrome's Apache-2.0 toolkit for running Lighthouse on every commit, asserting budgets, storing results and blocking performance, accessibility and SEO regressions.
BBenchmarkDotNet
BenchmarkDotNet is the MIT-licensed .NET library for turning methods into reliable, reproducible micro-benchmarks with statistical analysis, diagnosers and exportable reports.
Hhyperfine
hyperfine is an Apache-2.0 command-line benchmarking tool that runs shell commands repeatedly with warm-up, statistical analysis and exports, ideal for comparing CLIs and builds.
NNBomber
NBomber is a distributed load-testing framework for .NET: write scenarios in C# or F# for HTTP, WebSockets, AMQP, SQL or any protocol, with a free personal licence and paid business plans.
FFortio
Fortio is an Apache-2.0 Go load-testing library, CLI, echo server and web UI that runs at a fixed QPS and records latency histograms and percentiles; it began as Istio's load tester.
CCodeQL
CodeQL is GitHub's semantic code analysis engine: it builds a queryable database from source code and runs security queries (MIT-licensed standard library) to find vulnerabilities, powering GitHub code scanning.
TTrivy
Trivy is Aqua Security's Apache-2.0 all-in-one scanner for container images, filesystems, Git repos, VM images and Kubernetes, finding CVEs, IaC misconfigurations, secrets, licences and SBOM data.
TTruffleHog
TruffleHog is Truffle Security's AGPL-3.0 secrets scanner that discovers, classifies (800+ types), verifies and analyses leaked credentials in Git, chats, wikis, logs, object stores and filesystems.
CCheckov
Checkov is an Apache-2.0 static analysis tool for infrastructure as code (Terraform, CloudFormation, Kubernetes, Helm, Dockerfile and more) that also does SCA for images and open-source packages.
NNuclei
Nuclei is ProjectDiscovery's MIT-licensed, template-based vulnerability scanner: simple YAML templates, community-contributed checks, multi-protocol support and CI/CD use for regression testing.
OOSV-Scanner
OSV-Scanner is Google's Apache-2.0 dependency vulnerability scanner and official frontend to the OSV database, covering many languages, package managers, OS packages and containers, with guided remediation and licence checks.
OOWASP Dependency-Track
OWASP Dependency-Track is an Apache-2.0 SBOM-driven component analysis platform that tracks components across your portfolio and flags vulnerable, outdated or policy-violating dependencies.
AAFL++
AFL++ is the community-maintained successor to Google's AFL: a coverage-guided fuzzer with faster execution, better mutations and instrumentation, custom mutators and modes for binaries, licensed AGPL-3.0-or-later.
SSchemathesis
Schemathesis is an MIT-licensed property-based API testing tool that generates inputs from OpenAPI, GraphQL and gRPC schemas, chains stateful workflows and finds 500s, schema violations and validation gaps.
Mmitmproxy
mitmproxy is an MIT-licensed, interactive, TLS-capable intercepting proxy for HTTP/1, HTTP/2 and WebSockets, with console, command-line (mitmdump) and web (mitmweb) interfaces and Python addons.
PPrometheus
Prometheus is the CNCF's Apache-2.0 systems and service monitoring system: a multi-dimensional time-series database with PromQL, pull-based scraping, service discovery and alerting rules.
JJaeger
Jaeger is the CNCF's Apache-2.0 distributed tracing platform; v2 is built on the OpenTelemetry Collector and accepts OTLP traces, with a UI for searching traces and analysing service dependencies.
SSigNoz
SigNoz is an OpenTelemetry-native observability platform with logs, metrics, traces, alerts and dashboards in one place; open-source self-hosted, plus SigNoz Cloud with a 30-day trial and usage pricing from $49.
HHoneycomb
Honeycomb is an observability platform built on high-cardinality, event-based data and distributed tracing, with BubbleUp, SLOs, AI agents and MCP; free tier with 20M events a month and Pro from $150/month.
DDynatrace
Dynatrace is an AI-powered observability and security platform covering APM, infrastructure, logs, digital experience (real-user and synthetic), application security and AI observability, priced per host-hour.
CCheckly
Checkly is a monitoring-as-code platform for API checks, Playwright browser checks, uptime monitors, alerts and status pages, run from 20+ locations; Hobby $0, Starter $24/month, Team $64/month.
UUptime Kuma
Uptime Kuma is an MIT-licensed, easy-to-use self-hosted monitoring tool for HTTP(s), TCP, keyword, JSON query, WebSocket, ping, DNS, push and Docker monitors, with 90+ notification services and status pages.
CChaos Mesh
Chaos Mesh is a CNCF incubating, Apache-2.0 chaos engineering platform for Kubernetes that defines pod, network, DNS, HTTP, I/O, time, stress, kernel, JVM and cloud faults as custom resources.
LLitmusChaos
LitmusChaos is a 100% open-source CNCF chaos engineering platform that uses Kubernetes custom resources to define chaos and steady-state hypotheses, with a hub of experiments and a control-plane UI.
GGremlin
Gremlin is an enterprise reliability management and resilience testing platform with fault injection, reliability scoring, dependency discovery and Foresight AI agents; custom quotes and a 30-day free trial.
Hhey
hey is a tiny Apache-2.0 HTTP load generator written in Go, originally called boom, used as a simple replacement for ApacheBench (ab).
Ooha
oha is an MIT-licensed Rust HTTP load generator inspired by hey, with a real-time terminal UI showing progress, latency and status codes as the test runs.
Bbombardier
bombardier is a fast, cross-platform MIT-licensed HTTP(S) benchmarking tool in Go that uses fasthttp, with an optional net/http client for HTTP/2.
Aautocannon
autocannon is an MIT-licensed HTTP/1.1 benchmarking tool written in Node.js, inspired by wrk and wrk2, with HTTP pipelining, HTTPS support and a programmatic API.
GGoose
Goose is an Apache-2.0 load-testing framework written in Rust and inspired by Locust, from Tag1 Consulting, for simple to complex user-behaviour load tests.
DDrill
Drill is a GPL-3.0 HTTP load-testing application written in Rust, with benchmark plans described in Ansible-inspired YAML files.
Gghz
ghz is an Apache-2.0 gRPC benchmarking and load-testing tool with a CLI, Go library and optional web app for storing and comparing results.
PPlow
Plow is an Apache-2.0 HTTP(S) benchmarking tool in Go using fasthttp, showing real-time statistics, histograms and percentiles in both a web UI and the terminal.
HHyperfoil
Hyperfoil is an Apache-2.0, microservice-oriented distributed benchmark framework in Java that is designed to avoid the coordinated-omission fallacy in latency measurement.
YYandex.Tank
Yandex.Tank is an Apache-2.0 extensible load-testing tool for Linux that drives generators such as phantom, JMeter and Python-based BFG, built for automated load-testing suites.
JJMH
JMH (Java Microbenchmark Harness) is OpenJDK's GPL-2.0 harness for building, running and analysing nano, micro, milli and macro benchmarks in Java and other JVM languages.
UUnlighthouse
Unlighthouse is an MIT-licensed tool that runs Google Lighthouse across your entire site, crawling pages and showing scores in a local UI, via CLI or CI integrations.
DDistributed Load Testing on AWS
Distributed Load Testing on AWS is an Apache-2.0 AWS Solutions implementation that runs load tests at scale on Amazon ECS on AWS Fargate, simulating thousands of users without managing servers.
AAzure App Testing (Azure Load Testing)
Azure App Testing is Microsoft's managed testing service that brings Azure Load Testing (JMeter and Locust at cloud scale) together with Playwright Workspaces for end-to-end browser testing.
SSpeedCurve
SpeedCurve (now SpeedCurve by Embrace) is a web performance monitoring service combining synthetic testing and real-user monitoring (RUM), with plans from $90 a month.
BBandit
Bandit is the PyCQA's Apache-2.0 tool for finding common security issues in Python code by building an AST for each file and running security plugins against it.
B Brakeman
Brakeman is a static analysis security vulnerability scanner for Ruby on Rails applications, run from the command line without needing the app to be running.
Ggosec
gosec is an Apache-2.0 Go security checker that inspects source code for security problems by scanning the Go AST and SSA representation.
FFind Security Bugs
Find Security Bugs is the LGPL-3.0 SpotBugs plugin for security audits of Java web and Android applications, also working with Kotlin, Groovy and Scala projects.
BBearer CLI
Bearer CLI is a SAST tool that scans source code and analyses data flows to find, filter and prioritise security and privacy risks, with a commercial Bearer Pro from Cycode.
OOpengrep
Opengrep is an LGPL-2.1 open-source SAST engine, a fork of Semgrep backed by a consortium of AppSec companies including Aikido, Endor Labs and others.
JJoern
Joern is an Apache-2.0 code analysis platform that builds code property graphs for C/C++, Java, JavaScript, Python, Kotlin, binaries and more, queried with a Scala-based DSL.
GGrype
Grype is Anchore's Apache-2.0 vulnerability scanner for container images, filesystems and SBOMs, covering major OS package ecosystems and language packages.
SSyft
Syft is Anchore's Apache-2.0 CLI and Go library for generating Software Bills of Materials (SBOMs) from container images, filesystems and archives, in CycloneDX, SPDX and other formats.
DDependabot
Dependabot is GitHub's automated dependency update service; its MIT-licensed core logic opens pull requests to update vulnerable and outdated dependencies across many ecosystems.
Ppip-audit
pip-audit is an Apache-2.0 PyPA tool that audits Python environments, requirements files and dependency trees for known vulnerabilities using the Python Packaging Advisory Database, and can fix them.
RRetire.js
Retire.js is an Apache-2.0 scanner that detects JavaScript libraries with known vulnerabilities in web apps and Node.js projects, and can generate an SBOM of the libraries it finds.
Ggovulncheck
govulncheck is the Go team's BSD-licensed vulnerability scanner that reports known vulnerabilities from the Go vulnerability database only when your code actually calls the affected functions.
GGitleaks
Gitleaks is an MIT-licensed tool for detecting secrets such as passwords, API keys and tokens in Git repositories, files and stdin; it is now feature complete with security-patch-only releases.
Ddetect-secrets
detect-secrets is Yelp's Apache-2.0, enterprise-friendly module for preventing new secrets entering a codebase, detecting committed secrets and tracking them with a baseline file.
TTalisman
Talisman is ThoughtWorks' MIT-licensed pre-commit and pre-push hook that inspects outgoing changesets for suspicious content such as tokens, passwords and private keys.
KKingfisher
Kingfisher is MongoDB's Apache-2.0 secret scanner and credential response tool in Rust: it detects leaked secrets with hundreds of rules, validates live credentials and maps blast radius.
KKICS
KICS (Keeping Infrastructure as Code Secure) is Checkmarx's Apache-2.0 open-source scanner for security vulnerabilities, compliance issues and misconfigurations in infrastructure-as-code.
CClair
Clair is an Apache-2.0 open-source project from Quay for static vulnerability analysis of application containers (OCI and Docker images), exposed through an API.
HHadolint
Hadolint is a GPL-3.0 Dockerfile linter written in Haskell that checks best practices and validates inline bash in RUN instructions using ShellCheck.
DDockle
Dockle is an Apache-2.0 container image linter for security that checks built images against best practices and CIS Docker Benchmark items.
Kkube-bench
kube-bench is Aqua Security's Apache-2.0 tool that checks whether Kubernetes is deployed according to the CIS Kubernetes Benchmark.
KKubescape
Kubescape is an Apache-2.0 Kubernetes security platform for IDEs, CI/CD and clusters, with risk analysis, compliance frameworks, misconfiguration and vulnerability scanning.
FFalco
Falco is the CNCF's Apache-2.0 cloud-native runtime security tool that detects abnormal behaviour in hosts, containers and Kubernetes using system calls and rules.
PProwler
Prowler is an Apache-2.0 open-source cloud security platform that automates security and compliance checks across AWS, Azure, GCP, Kubernetes and more, with a CLI and local server.
PPolaris
Polaris is Fairwinds' Apache-2.0 tool that validates Kubernetes workloads against best practices as a dashboard, admission controller or CLI.
KKubeLinter
KubeLinter is StackRox's Apache-2.0 static analysis tool that checks Kubernetes YAML files and Helm charts against best practices for security and production readiness.
Fffuf
ffuf is a fast, MIT-licensed web fuzzer written in Go for content discovery, virtual host discovery and parameter fuzzing during authorised security testing.
GGobuster
Gobuster is an Apache-2.0 Go tool for brute-forcing directories and files, DNS subdomains, virtual hosts and cloud buckets during authorised testing.
OOWASP Amass
OWASP Amass is an Apache-2.0 tool for in-depth attack surface mapping and external asset discovery using open-source intelligence and active techniques.
AAkto
Akto is an MIT-licensed security platform that began in API security testing and now positions itself as security for AI agents, MCP servers and LLMs.
RRESTler
RESTler is Microsoft Research's MIT-licensed stateful REST API fuzzer that infers dependencies from an OpenAPI spec and exercises cloud services to find security and reliability bugs.
CCATS
CATS is Endava's Apache-2.0 REST API fuzzer and negative-testing tool that generates, runs and reports tests for OpenAPI endpoints with no coding.
OOSS-Fuzz
OSS-Fuzz is Google's free continuous fuzzing service for critical open-source projects, running libFuzzer, AFL++ and other engines at scale on ClusterFuzz.
Hhonggfuzz
honggfuzz is Google's Apache-2.0 security-oriented fuzzer with evolutionary, feedback-driven fuzzing based on software and hardware code coverage.
JJazzer
Jazzer is Code Intelligence's Apache-2.0 coverage-guided, in-process fuzzer for the JVM, based on libFuzzer, with JUnit integration and bug detectors.
AAtheris
Atheris is Google's Apache-2.0 coverage-guided Python fuzzing engine, based on libFuzzer, for Python code and CPython native extensions.
Bboofuzz
boofuzz is a GPL-2.0 network protocol fuzzing framework in Python, a fork and successor of the Sulley fuzzing framework.
GGitHub Advanced Security
GitHub Advanced Security is GitHub's built-in, AI-powered application security suite: code scanning with CodeQL, secret scanning and push protection, dependency review and Copilot Autofix.
GGitGuardian
GitGuardian is a credential-layer security platform for secrets detection and remediation across code, CI and collaboration tools, available as SaaS or self-hosted, with a free plan.
SStackHawk
StackHawk is a developer-focused application security testing platform, now positioned as an AI coding agent security platform that finds, fixes and verifies exploitable vulnerabilities; plans from $10 per user per month.
SSocket
Socket is a software supply-chain security platform that blocks zero-day supply chain attacks in JavaScript, Python and Go dependencies by analysing package behaviour, with a free plan.
AAikido Security
Aikido Security is an all-in-one developer security platform covering SAST, SCA, secrets, IaC, containers, cloud posture, DAST and runtime protection, with a free Developer plan.
WWiz
Wiz is a cloud security platform that connects code, cloud and runtime into one agentic cybersecurity platform covering posture, vulnerabilities, identities, data and AI security.
DDocker Scout
Docker Scout is Docker's software supply-chain tool that analyses container images, builds SBOMs and gives near real-time, actionable insights and policy checks before images reach production.
442Crunch
42Crunch is an API security platform known for OpenAPI audit, conformance scanning and API protection, now positioned as an AI security platform for MCP servers used by AI agents.
MMayhem Security
Mayhem is an automated code and API security testing platform that uses fuzzing and AI to generate thousands of tests and report actionable, reproducible findings.
IIntruder
Intruder is an exposure-management platform for lean security teams, combining vulnerability management, attack surface monitoring and cloud security, with a free trial.
MMend.io
Mend.io is an application security platform covering SCA, SAST, container and AI security, positioned as unifying AppSec and AI security.
EEndor Labs
Endor Labs is an agentic application security platform for AI-generated and human-written code, covering SCA with reachability, SAST, secrets and container scanning to prioritise real risk.
FFOSSA
FOSSA is a software supply-chain platform for SBOM generation, software composition analysis, open-source licence compliance and vulnerability management, with a free plan.
ZZipkin
Zipkin is an Apache-2.0 distributed tracing system that gathers timing data to troubleshoot latency problems in service architectures, with a UI for finding and viewing traces.
GGrafana Tempo
Grafana Tempo is an AGPL-3.0, high-volume, minimal-dependency distributed tracing backend that stores traces in object storage and integrates with Grafana, Prometheus and Loki.
GGrafana Loki
Grafana Loki is an AGPL-3.0 log aggregation system, "like Prometheus, but for logs", that indexes labels rather than full text to keep costs low.
GGrafana Mimir
Grafana Mimir is an AGPL-3.0 horizontally scalable, highly available, multi-tenant, long-term storage system for Prometheus metrics.
GGrafana Pyroscope
Grafana Pyroscope is an AGPL-3.0 continuous profiling platform that helps debug performance issues down to a single line of code.
UUptrace
Uptrace is an AGPL-3.0 open-source APM built on OpenTelemetry for traces, metrics and logs, storing data in ClickHouse, with self-hosted and cloud options.
GGatus
Gatus is an Apache-2.0 developer-oriented health dashboard and status page that monitors HTTP, ICMP, TCP and DNS endpoints with condition-based checks and alerting.
ZZabbix
Zabbix is an AGPL-3.0 enterprise-class monitoring platform for networks, servers, VMs, applications and cloud, with agents, templates, alerting and dashboards.
NNetdata
Netdata is a GPL-3.0 real-time monitoring agent with per-second metrics, auto-discovery, ML-based anomaly detection and zero-configuration dashboards, plus Netdata Cloud.
VVictoriaMetrics
VictoriaMetrics is an Apache-2.0 fast, cost-effective monitoring solution and time-series database compatible with Prometheus, available single-node or clustered.
OOpenObserve
OpenObserve is an AGPL-3.0 observability platform for logs, metrics, traces, RUM, session replay, pipelines, SLOs and LLM observability, deployed as a single binary.
FFluent Bit
Fluent Bit is a CNCF, Apache-2.0 fast and lightweight processor for logs, metrics and traces on Linux, BSD, macOS and Windows, used widely as a Kubernetes log shipper.
VVector
Vector is an MPL-2.0 high-performance observability data pipeline from Datadog for collecting, transforming and routing logs and metrics, written in Rust.
PPixie
Pixie is an Apache-2.0 CNCF project for instant, Kubernetes-native application observability using eBPF to capture telemetry without code changes.
CCoroot
Coroot is an Apache-2.0 observability and APM tool with AI-powered root cause analysis, combining eBPF metrics, logs, traces, continuous profiling and SLO-based alerting with predefined dashboards.
PParca
Parca is an Apache-2.0 continuous profiling project that analyses CPU and memory usage down to the line number over time, using an eBPF agent.
NNagios Core
Nagios Core is the GPL-2.0 open-source monitoring engine behind Nagios, checking hosts and services with plugins and alerting when problems occur.
CChaos Toolkit
Chaos Toolkit is an Apache-2.0 open-source chaos engineering toolkit and orchestration framework for developers, with declarative experiments and extensions for clouds and platforms.
TToxiproxy
Toxiproxy is Shopify's MIT-licensed TCP proxy for simulating network and system conditions such as latency, timeouts and bandwidth limits in chaos and resiliency testing.
PPumba
Pumba is an Apache-2.0 chaos testing, network emulation and stress testing tool for Docker containers, able to kill, pause and stop containers and add network delays or packet loss.
KKrkn
Krkn is an Apache-2.0 CNCF sandbox chaos and resiliency testing tool for Kubernetes, focused on improving performance under failure conditions.
BBetter Stack
Better Stack combines uptime monitoring, incident management, status pages, logs and observability in one platform, free for personal projects and paid from $29 a month.
UUptimeRobot
UptimeRobot is a widely used uptime monitoring service for websites, APIs, ports, keywords and SSL, with a free plan and paid Solo, Team and Scale plans.
SSteadybit
Steadybit is a chaos engineering and reliability platform with a 30-day free trial and an open-source Reliability Hub of 200+ actions for injecting faults and verifying resilience.
AAWS Fault Injection Service
AWS Fault Injection Service (FIS) is a managed chaos engineering service for running fault-injection experiments on AWS workloads, priced at $0.10 per action-minute.
AAzure Chaos Studio
Azure Chaos Studio is Microsoft's managed chaos engineering service for injecting faults into Azure resources, run from the portal or by an AI agent.
RRollbar
Rollbar is an error monitoring service that groups exceptions, tracks deploys and alerts teams in real time, with a free plan including 5,000 occurrences.
HHoneybadger
Honeybadger is an application monitoring service for error tracking, uptime and cron monitoring and logs, with a free Developer plan and Team from $26 a month.
CCoralogix
Coralogix is an observability platform for logs, metrics, traces and security data that stores data in your own cloud bucket, priced per GB by data type.
CCatchpoint
Catchpoint is an Internet Performance Monitoring (IPM) platform for synthetic monitoring, real-user monitoring, network and BGP visibility from a large global agent network.