Another API Test Automation tool

Shashank Gudipati — Wed, 09 Mar 2022 10:26:00 +0000

As I was writing APIs one day at work, I realized that I wasn't too sure whether those APIs were secure. So I started looking for simple GUI tools that can be used by teams to evaluate their API security posture.

And in this process I found 3 categories of tools:

Penetration-as-a-service vendors

I wasn't too keen on black-box testing techniques as they come late into the development life-cycle and don't offer much transparency with respect to tests
Open-source API fuzzers

There are quiet a few robust tools out there. But again these require some time and effort to setup and get going.
Paid tools

Again I could find a bunch of platforms that run 100s of tests but were expensive.

And so I set forth to writing one by myself. As part of my research, I found out that OpenAPI specification is a good starting point at describing APIs since it's an industry standard and that lot of tooling is available around it.

Also took the same approach as the other paid and free/open-source tools to finding API security flaws.

However, I have attempted the following:

To keep the UI simple (easy to navigate)
Maintain OpenAPI Spec validation errors at a minimal so that developers can quickly get documentation out of their way

Finding Schema validation errors is simple:

Upload a spec or Postman Collection or start with a petstore template
Fix validation errors and get to a RUN_API status
Go the Run Tab, select API Endpoint URL and hit Run to find schema validation errors

Although it's still work in progress, would love for you guys to check it out and share feedback.

For more information, do check out: https://cymitra.com or head directly to https://apihome.io

Thank you

A Simple API Automation Platform

Shashank Gudipati — Mon, 07 Mar 2022 12:14:50 +0000

ApiHome is a Simple Test Automation platform.

We realize that the best way to sanitize API input/output is by describing the API using OpenAPI documentation.

How does it work?
Upload a spec -> Fix validation errors -> Run API Tests

Why ApiHome?

We understand that developers like to get documentation out of their way. So in case you don't have a spec already, feel free to use the default template or a Postman collection to get started

We have also ensured that Spec validation errors are to the point so developers can quickly fix them & run tests

Use-cases:

API Inventory
Business-logic testing(corner-cases)
Security testing

For more information: Visit https://cymitra.com

openapi #api #automation #testing

DEV Community: Shashank Gudipati

Another API Test Automation tool

A Simple API Automation Platform

openapi #api #automation #testing