EvoMaster vs RESTest
EvoMaster
github.comRESTest
github.comSide by side
| Figure | EvoMaster | RESTest |
|---|---|---|
| Price from | Free | Free |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | — |
| Windows | Yes | Yes |
| macOS | Yes | — |
| Linux | Yes | Yes |
| API | Yes | — |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 1 |
| Spec score · API Testing Tools | 8.4 (#12) | 8.1 (#17) |
| Authentication | It supports authentication headers and cookies, including dynamically obtaining tokens or cookies from a login endpoint. | The --auth option accepts API keys, bearer tokens, and session cookies, and redacts credentials from displayed output and saved reports. |
| Purpose | EvoMaster automatically generates system-level tests through fuzzing for web and enterprise applications. | RESTest is a black-box testing tool that generates requests from an OpenAPI document, sends them to a REST API, and reports faults. |
Plans
In their own words
EvoMaster
EvoMaster is a free, open-source tool that uses fuzzing to generate system-level tests for web and enterprise applications. It targets REST, GraphQL, and RPC APIs, including gRPC and Thrift. Black-box mode works with APIs in any programming language, while white-box mode analyzes JVM bytecode. Generated tests can be JUnit 4 or 5 in Java or Kotlin, or suites in Python or JavaScript. More than 30 oracles check issues including HTTP 500 responses, schema mismatches, BOLA, and SQL injection. White-box testing can analyze SQL and MongoDB interactions with PostgreSQL, MySQL, H2, and MongoDB support. Authentication accepts headers and cookies, including tokens or cookies obtained from a login endpoint. REST testing requires OpenAPI 2.0, 3.0, or 3.1. PyPI is the recommended installation route, with Docker and an uber-fat JAR also available. EvoMaster runs on Linux, macOS, Windows, and self-hosted environments, and integrates with GitHub Actions through a custom action.